[AGENT++] trap mangled?

[Michele Marcon]

I have sent a trap from agent++ (latest version), but I have this output log from the manager:



Received 237 bytes from 172.31.26.55, port 3072.
SNMP Message:
    0:  packet ->
        SEQUENCE (0x30), 234 bytes:
    3:    version ->
          INTEGER-32 (0x02), 1 byte == 3 <v3>
    6:    header-data ->
          SEQUENCE (0x30), 15 bytes:
    8:      message-id ->
            INTEGER-32 (0x02), 3 bytes == 917623
   13:      max-message-size ->
            INTEGER-32 (0x02), 2 bytes == 4096
   17:      msg-flags ->
            OCTET-STRING (0x04), 1 byte == (hex) 03
   20:      security-model ->
            INTEGER-32 (0x02), 1 byte == 3 <UsmSecurity>
   23:    security-parameters ->
          OCTET-STRING (0x04), 65 bytes ==
   25:      usm-security-parameters ->
            SEQUENCE (0x30), 63 bytes:
   27:        authorizing-engine-id ->
              OCTET-STRING (0x04), 22 bytes == (hex) 80 00 13 70 05 75 2d 6d 63
68 62 2d 31 37 2d 32 30 37 2d 31 00 a1
   51:        engine-boots ->
              INTEGER-32 (0x02), 1 byte == 14
   54:        engine-time ->
              INTEGER-32 (0x02), 2 bytes == 7285
   58:        username ->
              OCTET-STRING (0x04), 6 bytes == riello
   66:        usm-authentication-parameters ->
              OCTET-STRING (0x04), 12 bytes == (hex) 6d b2 65 45 f1 a7 c4 17 51
9b e2 4f
   80:        usm-privacy-parameters ->
              OCTET-STRING (0x04), 8 bytes == *Error!*  Mangled value.
   90:        Remainder of the bad packet follows.
{      04, 81, 90, 85, 89, df, 4a, 1d, f7, 9c, cd, 0d, 50, 7e, 74, 70,
       10, 2e, e3, 41, ed, d6, 51, 71, cb, ed, 78, 41, 21, 9c, 07, 7f,
       7a, 24, 66, 53, bc, 27, 44, 34, de, cd, f1, c9, f8, 11, aa, 92,
       9e, bf, d8, 7a, cf, 31, c0, 22, 72, 3c, 13, f4, ae, 6f, 4a, 5c,
       5b, 1d, de, 63, 8a, b3, 09, 70, 01, 4b, ae, fc, 00, b3, b7, be,
       07, 46, 08, bf, b6, 34, 26, cb, 86, f6, bd, 8b, ad, 21, 06, f2,
       38, ad, 07, 27, db, c5, 4a, 79, 4b, de, 07, 39, 3b, 97, 54, 10,
       62, bc, 7d, 5a, 8c, dd, a1, 1f, 0b, 58, 35, 08, ba, 14, 7c, da,
       b8, c5, c1, 36, 91, a4, 5d, f3, 78, 11, 0a, 95, e0, 84, d6, 6e,
       16, f8, a2     }


Everything looks ok except for the usm-privacy-parameters. This should be the salt for encryption, right? With wireshark I see this is something like:

0000002d64f6478d

Therefore it should be ok. Do you have any idea as why the manager think this value is "mangled"?

Thanks.




Michele Marcon
Centro Ricerche
RPS SpA
Viale Europa, 7
37045 Legnago (VR)
Tel. +39 0442 635811 - Fax. +39 0442 635934 - Mobile: +39 335 1233317
Skype Id:  - VoIp:
E-mail: M.Marcon at riello-ups.com
Web: http://www.riello-ups.com
 -----------------------------------------------------------------------------------------------------
Per favore non stampare questo messaggio se proprio non è necessario
Please consider the environment before printing this e-mail
-----------------------------------------------------------------------------------------------------
Chi riceve il presente messaggio e` tenuto a verificare se lo stesso non gli sia pervenuto per errore. In tal caso e` pregato di avvisare immediatamente il mittente e, tenuto conto delle responsabilita` connesse all'indebito utilizzo e/o divulgazione del messaggio e/o delle informazioni in esso contenute, voglia cancellare l'originale e distruggere le varie copie o stampe.

The receiver of this message is required to check if he/she has received it erroneously. If so, the receiver is requested to immediately inform the sender and - in consideration of the responsibilities arising from undue use and/or disclosure of the message and/or the information contained therein - destroy the original message and any copy or printout thereof.