SNMP is listening on the wrong transport protocol and the wrong

[Juan Torres]

Support,

Hi,

I have RHEL 7.2, CentOS 7.x and SUSE 11.x and all of them have the same problem with the SNMP protocol.
I need to make the SNMP talk UDP:161 and turn down the TCP:199.

# netstat -tulpn | grep snmp
tcp 0 0 0.0.0.0:161 0.0.0.0:* LISTEN 18702/snmpd
tcp 0 0 127.0.0.1:199 0.0.0.0:* LISTEN 18702/snmpd
udp 0 0 0.0.0.0:161 0.0.0.0:* 18702/snmpd

-------------------------------------------------------------------------------------------------------
Troubleshoot so far...
/etc/services
#snmp 161/tcp # Simple Net Mgmt Proto
#smux 199/tcp # SNMP Unix Multiplexer
#smux 199/udp
/etc/sysconfig/snmpd
OPTIONS="-Lsd -Lf /dev/null -p /var/run/snmpd.pid -a -I -smuxsocket -x :161"
/etc/snmp/snmpd.conf
smuxsocket 1.0.0.0
snmpd udp::161
rocommunity public 172.31.64.0/22

# netstat -lnp | grep snmp
tcp 0 0 0.0.0.0:161 0.0.0.0:* LISTEN 3901/snmpd
udp 0 0 0.0.0.0:161 0.0.0.0:* 3901/snmpd

It still not working!!!!



Juan Torres, MCs
Sr Server Engineer
UCSF Benioff Children's Hospital Oakland
747 52nd Street
Oakland, CA 94609
***@mail.cho.org
Mobile: [phone]
Home : 386.847.3150
E-Fax : [phone]



CONFIDENTIALITY NOTICE: This electronic message (and any attachments) is intended to be for the use only of the named recipient, and may contain information that is confidential or privileged. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of the contents of this message is strictly prohibited. If you have received this message in error or are not the named recipient, please notify us immediately by contacting the sender at the electronic mail address noted above, and delete and destroy all copies of this message (and any attachments). Thank you.

[j***@rego.org]

Does your snmdp.conf use 'agentaddress udp:161' to set the listening port?


Having snmpd also listening on TCP 161 is mostly benign, but it looks like you don't have the correct option set.

-
Jim

--------- Original Message --------- Subject: SNMP is listening on the wrong transport protocol and the wrong
From: "Juan Torres" <***@mail.cho.org>
Date: 4/28/16 4:25 pm
To: net-snmp-***@lists.sourceforge.net, "Chris Benjamin" <***@mail.cho.org>, "Juan Torres" <***@mail.cho.org>

Support,

Hi,

I have RHEL 7.2, CentOS 7.x and SUSE 11.x and all of them have the same problem with the SNMP protocol.
I need to make the SNMP talk UDP:161 and turn down the TCP:199.

# netstat -tulpn | grep snmp
tcp 0 0 0.0.0.0:161 0.0.0.0:* LISTEN 18702/snmpd
tcp 0 0 127.0.0.1:199 0.0.0.0:* LISTEN 18702/snmpd
udp 0 0 0.0.0.0:161 0.0.0.0:* 18702/snmpd

-------------------------------------------------------------------------------------------------------
Troubleshoot so far...
/etc/services
#snmp 161/tcp # Simple Net Mgmt Proto
#smux 199/tcp # SNMP Unix Multiplexer
#smux 199/udp

/etc/sysconfig/snmpd
OPTIONS="-Lsd -Lf /dev/null -p /var/run/snmpd.pid -a -I -smuxsocket -x :161"

/etc/snmp/snmpd.conf
smuxsocket 1.0.0.0
snmpd udp::161
rocommunity public 172.31.64.0/22

# netstat -lnp | grep snmp
tcp 0 0 0.0.0.0:161 0.0.0.0:* LISTEN 3901/snmpd
udp 0 0 0.0.0.0:161 0.0.0.0:* 3901/snmpd



It still not working!!!!



Juan Torres, MCs
Sr Server Engineer
UCSF Benioff Children's Hospital Oakland
747 52nd Street
Oakland, CA 94609
***@mail.cho.org
Mobile: [phone]
Home : 386.847.3150
E-Fax : [phone]


CONFIDENTIALITY NOTICE: This electronic message (and any attachments) is intended to be for the use only of the named recipient, and may contain information that is confidential or privileged. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of the contents of this message is strictly prohibited. If you have received this message in error or are not the named recipient, please notify us immediately by contacting the sender at the electronic mail address noted above, and delete and destroy all copies of this message (and any attachments). Thank you.

------------------------------------------------------------------------------ Find and fix application performance issues faster with Applications Manager Applications Manager provides deep performance insights into multiple tiers of your business applications. It resolves application problems quickly and reduces your MTTR. Get your free trial! https://ad.doubleclick.net/ddm/clk/302982198;130105516;z_______________________________________________ Net-snmp-users mailing list Net-snmp-***@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users

[Juan Torres]

Hi Jim,

I appreciate your response. I researched and test it more. I think a have it resolve it. I do not see "LISTEN" state listed, but I think it will work.


/etc/sysconfig/selinux
SELINUX=disabled

/etc/snmp/snmpd.conf

smuxsocket 1.0.0.0
snmpset -v 2c udp:my.ip.address.xxx:161 sysUpTime.0
snmpd udp:0.0.0.0:161
agentAddress udp:my.ip.address.xxx:161
rocommunity public my.ip.address.xxx 0

/etc/sysconfig/snmpd
OPTIONS="-Lsd -Lf /dev/null -p /var/run/snmpd.pid -a -I -smux,-smuxsocket,-smuxpeer -x my.ip.address.xxx:161"


# netstat -tulpn | grep snmpd
udp 0 0 my.ip.address.xxx:161 0.0.0.0:* 3805/snmpd

Thanks,


Juan Torres, MCs
Sr Server Engineer
UCSF Benioff Children's Hospital Oakland
747 52nd Street
Oakland, CA 94609
***@mail.cho.org
Mobile: [phone]
Home : 386.847.3150
E-Fax : [phone]



CONFIDENTIALITY NOTICE: This electronic message (and any attachments) is intended to be for the use only of the named recipient, and may contain information that is confidential or privileged. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of the contents of this message is strictly prohibited. If you have received this message in error or are not the named recipient, please notify us immediately by contacting the sender at the electronic mail address noted above, and delete and destroy all copies of this message (and any attachments). Thank you.
Does your snmdp.conf use 'agentaddress udp:161' to set the listening port?

Having snmpd also listening on TCP 161 is mostly benign, but it looks like you don't have the correct option set.

-
Jim



--------- Original Message ---------
Subject: SNMP is listening on the wrong transport protocol and the wrong
From: "Juan Torres" <***@mail.cho.org>
Date: 4/28/16 4:25 pm
To: net-snmp-***@lists.sourceforge.net, "Chris Benjamin" <***@mail.cho.org>, "Juan Torres" <***@mail.cho.org>

Support,

Hi,

I have RHEL 7.2, CentOS 7.x and SUSE 11.x and all of them have the same problem with the SNMP protocol.
I need to make the SNMP talk UDP:161 and turn down the TCP:199.

# netstat -tulpn | grep snmp
tcp 0 0 0.0.0.0:161 0.0.0.0:* LISTEN 18702/snmpd
tcp 0 0 127.0.0.1:199 0.0.0.0:* LISTEN 18702/snmpd
udp 0 0 0.0.0.0:161 0.0.0.0:* 18702/snmpd

-------------------------------------------------------------------------------------------------------
Troubleshoot so far...
/etc/services
#snmp 161/tcp # Simple Net Mgmt Proto
#smux 199/tcp # SNMP Unix Multiplexer
#smux 199/udp
/etc/sysconfig/snmpd
OPTIONS="-Lsd -Lf /dev/null -p /var/run/snmpd.pid -a -I -smuxsocket -x :161"
/etc/snmp/snmpd.conf
smuxsocket 1.0.0.0
snmpd udp::161
rocommunity public 172.31.64.0/22

# netstat -lnp | grep snmp
tcp 0 0 0.0.0.0:161 0.0.0.0:* LISTEN 3901/snmpd
udp 0 0 0.0.0.0:161 0.0.0.0:* 3901/snmpd

It still not working!!!!






Juan Torres, MCs
Sr Server Engineer
UCSF Benioff Children's Hospital Oakland
747 52nd Street
Oakland, CA 94609
***@mail.cho.org
Mobile: [phone]
Home : 386.847.3150
E-Fax : [phone]



CONFIDENTIALITY NOTICE: This electronic message (and any attachments) is intended to be for the use only of the named recipient, and may contain information that is confidential or privileged. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of the contents of this message is strictly prohibited. If you have received this message in error or are not the named recipient, please notify us immediately by contacting the sender at the electronic mail address noted above, and delete and destroy all copies of this message (and any attachments). Thank you.
------------------------------------------------------------------------------ Find and fix application performance issues faster with Applications Manager Applications Manager provides deep performance insights into multiple tiers of your business applications. It resolves application problems quickly and reduces your MTTR. Get your free trial! https://ad.doubleclick.net/ddm/clk/302982198;130105516;z_______________________________________________ Net-snmp-users mailing list Net-snmp-***@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users