[SNMP4J] Cant see TestAgent's coldStartNotification!

[Frank Fock]

Hi,

As the log output describes it: The trap is not
sent because VACM did not provide access
to the OID 1.3.6.1.6.3.1.1.5.1:

 > 1492 [main] WARN org.snmp4j.agent.mo.snmp.NotificationOriginatorImpl -
 > Access denied by VACM for 1.3.6.1.6.3.1.1.5.1

One line above, the reason is printed:

 >DefaultMOMutableRow2PC[index=7.118.51.103.114.111.117.112.0.3.3,values=[1,
 > fullReadView, fullWriteView, fullNotifyView, 3, 1] with
 > exactContextMatch=true, prefixMatch=false, matchSecModel=true and
 > matchSecLevel=false

This line indicates that the only VACM entry that could have
given access is not allowed to, because the security levels
do not match.

Best regards,
Frank

pradip de wrote:
> Hi,
> I am running the TestAgent as-is except I have modified
> notificationMIB.addNotifyEntry() to send
> SnmpNotificationMIB.SnmpNotifyTypeEnum.trap instead of 'inform'. However,
> when I run it, I dont see a trap packet in wireshark corresponding to the
> coldStartNotification. I was listening both on the loopback interface and on
> 'any' interface. I have pasted the end of the debug output below which shows
> warnings of access denied by the VACM. Is this the reason why I dont see
> traps on the wire? The TestAgent is running as root. What configuration am I
> doing wrong? Could someone help me resolve this issue.
> thanks,
> Pradip
> 
> 
> 1469 [main] DEBUG org.snmp4j.agent.mo.DefaultMOTable  - Removed 1 rows from
> 1.3.6.1.6.3.18.1.1.1 because importing with a REPLACE import mode
> 1470 [main] DEBUG org.snmp4j.agent.io.MOServerPersistence  - Looking up
> object 1.3.6.1.6.3.18.1.2.1
> 1471 [main] DEBUG org.snmp4j.agent.io.MOServerPersistence  - Loading data
> for object 1.3.6.1.6.3.18.1.2.1
> 1472 [main] DEBUG org.snmp4j.agent.mo.DefaultMOTable  - Removed 2 rows from
> 1.3.6.1.6.3.18.1.2.1 because importing with a REPLACE import mode
> 1474 [main] DEBUG org.snmp4j.agent.io.MOServerPersistence  - Loading data
> for context ''
> 1475 [main] WARN org.snmp4j.agent.io.MOServerPersistence  - Context 'public'
> is no longer supported by agent
> 1478 [DefaultUDPTransportMapping_0.0.0.0/161] INFO
> org.snmp4j.transport.DefaultUdpTransportMapping  - UDP receive buffer size
> for socket 0.0.0.0/161 is set to: 56320
> 1480 [main] INFO org.snmp4j.agent.mo.snmp.NotificationOriginatorImpl  -
> Notification 1.3.6.1.6.3.1.1.5.1 issued with []
> 1481 [main] DEBUG org.snmp4j.agent.mo.snmp.VacmMIB  - VACM access requested
> for context=, securityName=cpublic, securityModel=2, securityLevel=3,
> viewType=0, OID=1.3.6.1.6.3.1.1.5.1
> 1483 [main] DEBUG org.snmp4j.agent.mo.snmp.VacmMIB  - Found group name
> 'v1v2group' for secName 'cpublic' and secModel 2
> 1484 [main] DEBUG org.snmp4j.agent.mo.snmp.VacmMIB  - Got views
> [DefaultMOMutableRow2PC[index=9.118.49.118.50.103.114.111.117.112.6.112.117.98.108.105.99.0.1,values=[1,
> fullReadView, fullWriteView, fullNotifyView, 3, 1]] for group name
> 'v1v2group'
> 1486 [main] DEBUG org.snmp4j.agent.mo.snmp.VacmMIB  - Matching against
> access entry
> DefaultMOMutableRow2PC[index=9.118.49.118.50.103.114.111.117.112.6.112.117.98.108.105.99.0.1,values=[1,
> fullReadView, fullWriteView, fullNotifyView, 3, 1] with
> exactContextMatch=false, prefixMatch=false, matchSecModel=true and
> matchSecLevel=true
> 1488 [main] WARN org.snmp4j.agent.mo.snmp.NotificationOriginatorImpl  -
> Access denied by VACM for 1.3.6.1.6.3.1.1.5.1
> 1488 [main] DEBUG org.snmp4j.agent.mo.snmp.VacmMIB  - VACM access requested
> for context=, securityName=v3notify, securityModel=3, securityLevel=1,
> viewType=0, OID=1.3.6.1.6.3.1.1.5.1
> 1489 [main] DEBUG org.snmp4j.agent.mo.snmp.VacmMIB  - Found group name
> 'v3group' for secName 'v3notify' and secModel 3
> 1490 [main] DEBUG org.snmp4j.agent.mo.snmp.VacmMIB  - Got views
> [DefaultMOMutableRow2PC[index=7.118.51.103.114.111.117.112.0.3.3,values=[1,
> fullReadView, fullWriteView, fullNotifyView, 3, 1]] for group name 'v3group'
> 1491 [main] DEBUG org.snmp4j.agent.mo.snmp.VacmMIB  - Matching against
> access entry
> DefaultMOMutableRow2PC[index=7.118.51.103.114.111.117.112.0.3.3,values=[1,
> fullReadView, fullWriteView, fullNotifyView, 3, 1] with
> exactContextMatch=true, prefixMatch=false, matchSecModel=true and
> matchSecLevel=false
> 1492 [main] WARN org.snmp4j.agent.mo.snmp.NotificationOriginatorImpl  -
> Access denied by VACM for 1.3.6.1.6.3.1.1.5.1
> _______________________________________________
> SNMP4J mailing list
> SNMP4J at agentpp.org
> http://lists.agentpp.org/mailman/listinfo/snmp4j

-- 
AGENT++
http://www.agentpp.com
http://www.snmp4j.com
http://www.mibexplorer.com
http://www.mibdesigner.com