[SNMP4J] 3DES trap is not sent

Frank Fock fock at agentpp.com
Tue Jul 15 08:15:22 CEST 2014


You cannot do this with on the command line with 
org.snmp4j.tools.console.SnmpRequest.
Instead you could use SNMP4J-CLT for example or write your own class.

Best regards,
Frank

Am 15.07.2014 06:34, schrieb NarayanaRao Yenduri:
> thanks Frank.
> how to do this from command prompt?
> i am using below CLI to generate trap.
>
> >java -cp snmp4j-2.2.5.jar;log4j-1.2.14.jar 
> org.snmp4j.tools.console.SnmpRequest  -p TRAP -v 3 -u cisco -a MD5 -A 
> cisco at 123 -x 3DES -X cisco at 123 127.0.0.1/8900 "1.3.6.1.2.1.1.3.0={t}0" 
> \ "1.3.6.1.2.1.1.1.0={s}System XYZ, Version N.M"
>
> please suggest.
>
> - Thanks,
> Narayanarao
>
>
> On Monday, July 14, 2014 7:53 PM, Frank Fock <fock at agentpp.com> wrote:
>
>
> Hi Narayanarao,
>
> Then you have not registered the privacy protocol you are using as 
> SecurityProtocol
> with SecurityProcotols.getInstance().addPrivacyProtocol(..)
>
> Best regards,
> Frank
>
> Am 14.07.2014 12:53, schrieb NarayanaRao Yenduri:
>> Hi Frank,
>> this is from debug statements that i shared (it seems privPassphrase 
>> was reset to null !)
>> 101 [main] DEBUG org.snmp4j.security.UsmUserTable  - Adding user 
>> cisco = 
>> UsmUser[secName=cisco,authProtocol=1.3.6.1.6.3.10.1.1.2,authPassphrase=bc:5f:dc:3a:57:95:c2:6a:17:12:35:6e:1d:4a:da:01,privProtocol=1.3.6.1.6.3.10.1.2.3,privPassphrase=null,localizationEngineID=80:00:13:70:01:0a:7e:b2:74:61:83:59:98]
>>
>> -Thanks,
>> Narayanarao
>>
>>
>> On Monday, July 14, 2014 1:23 PM, Frank Fock <fock at agentpp.com> 
>> <mailto:fock at agentpp.com> wrote:
>>
>>
>> Hi Narayanarao,
>>
>> Which class (with line 101) do you mean?
>> Could you please also post the line content with some context?
>>
>> Best regards,
>> Frank
>>
>> Am 14.07.2014 09:34, schrieb NarayanaRao Yenduri:
>>> Hi Frank,
>>>
>>> i just observed, at debug line starting 101, privPassphrase set as 
>>> null.
>>> it was set properly at the beginning.
>>>
>>> could you please check and suggest?
>>>
>>> -Thanks,
>>> Narayanarao
>>>
>>>
>>> On Monday, July 14, 2014 12:49 PM, NarayanaRao Yenduri 
>>> <ynr_ind at yahoo.com> <mailto:ynr_ind at yahoo.com> wrote:
>>>
>>>
>>> Hi Frank,
>>> i am copy / pasting the CLI. could you please suggest if i miss any here
>>>
>>> >java -cp snmp4j-2.2.5.jar;log4j-1.2.14.jar 
>>> org.snmp4j.tools.console.SnmpRequest  -p TRAP -v 3 -u cisco -a MD5 
>>> -A cisco at 123 -x 3DES -X cisco at 123 127.0.0.1/8900 
>>> "1.3.6.1.2.1.1.3.0={t}0" \ "1.3.6.1.2.1.1.1.0={s}System XYZ, Version 
>>> N.M"
>>>
>>>
>>> C:\Users\nyenduri\Downloads>java -cp 
>>> snmp4j-2.2.5.jar;log4j-1.2.14.jar 
>>> org.snmp4j.tools.console.SnmpRequest  -p TRAP -v 3 -u cisco -a MD5 
>>> -A cisco at 123 -x 3DES -X cisco at 123 127.0.0.1/8900 
>>> "1.3.6.1.2.1.1.3.0={t}0" "1.3.6.1.2.1.1.1.0={s}System XYZ, Version N.M"
>>> 0 [main] DEBUG org.snmp4j.security.Salt  - Initialized Salt to 
>>> e8e207a6072ec42.12
>>> [main] DEBUG org.snmp4j.security.UsmUserTable  - Adding user cisco = 
>>> UsmUser[secName=cisco,authProtocol=1.3.6.1.6.3.10.1.1.2,authPassphrase=cisco at 123,privProtocol=1.3.6.1.6.3.10.1.2.3,privPassphrase=cisco at 123,localizationEngineID=null 
>>> <mailto:authPassphrase=cisco at 123,privProtocol=1.3.6.1.6.3.10.1.2.3,privPassphrase=cisco at 123,localizationEngineID=null>] 
>>> 16 [DefaultUDPTransportMapping_10.126.178.116/0]
>>> DEBUG org.snmp4j.transport.DefaultUdpTransportMapping  - UDP receive 
>>> buffer size for socket 10.126.178.116/0 is set to: 8192
>>> 19 [main] DEBUG org.snmp4j.mp.MPv3  - Context engine ID of 
>>> unconfirmed scoped PDU is empty! Setting it to local engine ID
>>> 22 [main] DEBUG org.snmp4j.security.USM  - 
>>> getUser(engineID=80:00:13:70:01:0a:7e:b2:74:61:83:59:98, 
>>> securityName=cisco)
>>> 99 [main] DEBUG org.snmp4j.security.AuthGeneric  - MD5First digest: 
>>> 61:ac:e8:86:10:d9:2f:b8:0c:cd:d9:44:d7:29:2e:19
>>> 99 [main] DEBUG org.snmp4j.security.AuthGeneric  - MD5localized key: 
>>> bc:5f:dc:3a:57:95:c2:6a:17:12:35:6e:1d:4a:da:01
>>> 101 [main] DEBUG org.snmp4j.security.UsmUserTable  - Adding user 
>>> cisco = 
>>> UsmUser[secName=cisco,authProtocol=1.3.6.1.6.3.10.1.1.2,authPassphrase=bc:5f:dc:3a:57:95:c2:6a:17:12:35:6e:1d:4a:da:01,privProtocol=1.3.6.1.6.3.10.1.2.3,privPassphrase=null,localizationEngineID=80:00:13:70:01:0a:7e:b2:74:61:83:59:98]
>>> 102 [main] DEBUG org.snmp4j.security.USM  - Unsupported security 
>>> level (missing or unsupported privacy protocol): Security params are 
>>> org.snmp4j.security.UsmSecurityParameters at 896fd7c
>>> org.snmp4j.MessageException: Message processing model 3 returned 
>>> error: Unsupported security level
>>>         at 
>>> org.snmp4j.MessageDispatcherImpl.sendPdu(MessageDispatcherImpl.java:5
>>> 01)
>>>         at org.snmp4j.Snmp.sendMessage(Snmp.java:1004)
>>>         at org.snmp4j.Snmp.send(Snmp.java:885)
>>>         at org.snmp4j.Snmp.send(Snmp.java:878)
>>>         at org.snmp4j.Snmp.send(Snmp.java:843)
>>>         at 
>>> org.snmp4j.tools.console.SnmpRequest.send(SnmpRequest.java:407)
>>>         at 
>>> org.snmp4j.tools.console.SnmpRequest.main(SnmpRequest.java:1243)
>>> Error while trying to send request: Message processing model 3 
>>> returned error: U
>>> nsupported security level
>>> org.snmp4j.MessageException: Message processing model 3 returned 
>>> error: Unsupported security level
>>>         at 
>>> org.snmp4j.MessageDispatcherImpl.sendPdu(MessageDispatcherImpl.java:5
>>> 01)
>>>         at org.snmp4j.Snmp.sendMessage(Snmp.java:1004)
>>>         at org.snmp4j.Snmp.send(Snmp.java:885)
>>>         at org.snmp4j.Snmp.send(Snmp.java:878)
>>>         at org.snmp4j.Snmp.send(Snmp.java:843)
>>>         at 
>>> org.snmp4j.tools.console.SnmpRequest.send(SnmpRequest.java:407)
>>>         at 
>>> org.snmp4j.tools.console.SnmpRequest.main(SnmpRequest.java:1243)
>>>
>>> - Thanks
>>> Narayanarao
>>>
>>>
>>>
>>> On Friday, July 11, 2014 8:11 PM, Frank Fock <fock at agentpp.com> 
>>> <mailto:fock at agentpp.com> wrote:
>>>
>>>
>>> Then please check it a third time. There are only two locations 
>>> where this
>>> error can happen. If a authentication protocol is missing or when a 
>>> privacy
>>> protocol is missing - or if any passphrase is missing for it.
>>>
>>> Best regards,
>>> Frank
>>>
>>>
>>> Am 11.07.2014 13:37, schrieb NarayanaRao Yenduri:
>>>> Thanks Frank for your reply.
>>>> i double checked and privacy pass phrase is set.
>>>> could you please let me know if enabling any debugs will help to 
>>>> narrow down the issue?
>>>>
>>>> -Narayanarao
>>>>
>>>> P.S:- my trap forward code is failing only for 3des privacy protocol.
>>>>
>>>>
>>>>
>>>> On Friday, July 11, 2014 12:16 PM, Frank Fock <fock at agentpp.com> 
>>>> <mailto:fock at agentpp.com> wrote:
>>>>
>>>>
>>>> Hi,
>>>>
>>>> Please fix the USM settings accoridng to the error message.
>>>> You are trying the use a security level that is not supported
>>>> by the protocol or by the provided security credentials.
>>>> For example if the secLevel is authPriv and you did not provide
>>>> a privacy passphrase, you will get this error.
>>>>
>>>> Best regards,
>>>> Frank
>>>>
>>>> Am 11.07.2014 05:33, schrieb NarayanaRao Yenduri:
>>>> > Any suggestions on this?
>>>> >
>>>> > - Narayanarao
>>>> >
>>>> >
>>>> > On Wednesday, July 9, 2014 1:15 PM, NarayanaRao Yenduri 
>>>> <ynr_ind at yahoo.com <mailto:ynr_ind at yahoo.com>> wrote:
>>>> >
>>>> >
>>>> >
>>>> > Hi Team,
>>>> > i 've problem in trap forwarding using 3DES protocol.
>>>> > i have copied the security policy jars already. the same code is 
>>>> working fine for all other protocols.
>>>> >
>>>> > org.snmp4j.MessageException: Message processing model 3 returned 
>>>> error: Unsupported security level
>>>> > at 
>>>> org.snmp4j.MessageDispatcherImpl.sendPdu(MessageDispatcherImpl.java:501)
>>>> > at org.snmp4j.Snmp.sendMessage(Snmp.java:1004)
>>>> > at org.snmp4j.Snmp.send(Snmp.java:885)
>>>> > at org.snmp4j.Snmp.send(Snmp.java:878)
>>>> > at org.snmp4j.Snmp.send(Snmp.java:843)
>>>> >
>>>> > any quick suggestion to resolve this is appreciated.
>>>> >
>>>> > Thanks
>>>> > Narayanarao
>>>>
>>>> > _______________________________________________
>>>> > SNMP4J mailing list
>>>> > SNMP4J at agentpp.org <mailto:SNMP4J at agentpp.org>
>>>> > https://oosnmp.net/mailman/listinfo/snmp4j
>>>>
>>>> -- 
>>>> ---
>>>> AGENT++
>>>> Maximilian-Kolbe-Str. 10
>>>> 73257 Koengen, Germany
>>>> https://agentpp.com <https://agentpp.com/>
>>>> Phone: +49 7024 8688230
>>>> Fax:  +49 7024 8688231
>>>>
>>>> _______________________________________________
>>>> SNMP4J mailing list
>>>> SNMP4J at agentpp.org <mailto:SNMP4J at agentpp.org>
>>>> https://oosnmp.net/mailman/listinfo/snmp4j
>>>>
>>>>
>>>>
>>>
>>> -- 
>>> ---
>>> AGENT++
>>> Maximilian-Kolbe-Str. 10
>>> 73257 Koengen, Germany
>>> https://agentpp.com  <https://agentpp.com/>
>>> Phone: +49 7024 8688230
>>> Fax:   +49 7024 8688231
>>>
>>>
>>>
>>>
>>
>> -- 
>> ---
>> AGENT++
>> Maximilian-Kolbe-Str. 10
>> 73257 Koengen, Germany
>> https://agentpp.com  <https://agentpp.com/>
>> Phone: +49 7024 8688230
>> Fax:   +49 7024 8688231
>>
>>
>
> -- 
> ---
> AGENT++
> Maximilian-Kolbe-Str. 10
> 73257 Koengen, Germany
> https://agentpp.com  <https://agentpp.com/>
> Phone: +49 7024 8688230
> Fax:   +49 7024 8688231
>
>

-- 
---
AGENT++
Maximilian-Kolbe-Str. 10
73257 Koengen, Germany
https://agentpp.com
Phone: +49 7024 8688230
Fax:   +49 7024 8688231




More information about the SNMP4J mailing list