snmp学习笔记之三－－开发netsnmp Agent
November 27th, 2008
No comments
- By: Bian Jiang (borderj@gmail.com)
- From: http://www.b0rder.com
- Date: 2008.11.11
1.mib 库文件 BVCOM-SYSTEMUPTIME-MIB.txt:
BVCOM-SYSTEMUPTIME-MIB DEFINITIONS ::= BEGIN
IMPORTS
TimeTicks FROM SNMPv2-SMI
enterprises FROM SNMPv2-SMI
OBJECT-TYPE, Integer32, MODULE-IDENTITY FROM SNMPv2-SMI;
bvcom OBJECT IDENTIFIER ::= { enterprises 26814 }
ipq6800 OBJECT IDENTIFIER ::= { bvcom 6800 }
bvcomAgentModules OBJECT IDENTIFIER ::= { ipq6800 1 }
bvcomAgentModuleObject OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This is an object that simply supports a writable integer
when compiled into the agent. See
http://www.net-snmp.org/tutorial-5/toolkit/XXX for further
implementation details."
DEFVAL { 1 }
::= { bvcomAgentModules 1 }
bvcomAgentSubagentObject OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This is an object that simply supports a writable integer
when attached to the agent. The object should be accessible
when the agentx subagent containing this object is attached.
See http://www.net-snmp.org/tutorial-5/toolkit/XXX for
further implementation details."
DEFVAL { 2 }
::= { bvcomAgentModules 2 }
bvcomAgentPluginObject OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This is an object that simply supports a writable integer
when attached to the agent. This object should be accessible
when the dynamic plugin has been loaded into the agent. See
http://www.net-snmp.org/tutorial-5/toolkit/XXX for further
implementation details."
DEFVAL { 3 }
::= { bvcomAgentModules 3 }
END
PS: 如果找不到mib库可以在/etc/profile文件中增加SNMPCONFPATH环境变量
export SNMPCONFPATH=/usr/local/share/snmp/export MIBS=ALL
2.复制mib库文件到/usr/local/share/snmp/mibs/:
sudo cp BVCOM-SYSTEMUPTIME-MIB.txt /usr/local/share/snmp/mibs/
3.加载mib库:
cat /usr/local/share/snmp/snmp.conf mibs +BVCOM-SYSTEMUPTIME-MIB
4.检查mib是否正常加载:
border@debian:/work/border/snmp/example-demon$ snmptranslate -IR -Tp bvcom
+--bvcom(26814)
|
+--ipq6800(6800)
|
+--bvcomAgentModules(1)
|
+-- -RW- Integer32 bvcomAgentModuleObject(1)
+-- -RW- Integer32 bvcomAgentSubagentObject(2)
+-- -RW- Integer32 bvcomAgentPluginObject(3)
5.查看mib2c支持的模板:
border@debian:/work/border/snmp/example-demon$ ls /usr/local/share/snmp/ mib2c.access_functions.conf mib2c.create-dataset.conf mib2c.scalar.conf mib2c.array-user.conf mib2c-data mib2c.table_data.conf mib2c.check_values.conf mib2c.genhtml.conf mibs mib2c.check_values_local.conf mib2c.int_watch.conf snmp.conf mib2c.column_defines.conf mib2c.iterate_access.conf snmp.conf~ mib2c.column_enums.conf mib2c.iterate.conf snmpconf-data mib2c.column_storage.conf mib2c.mfd.conf snmpd.conf mib2c.conf mib2c.notify.conf snmp_perl.pl mib2c.container.conf mib2c.old-api.conf snmp_perl_trapd.pl
6.通过模板生成.c 和 .h 文件:
border@debian:/work/border/snmp/example-demon$ mib2c -c mib2c.int_watch.conf bvcomAgentModules writing to - *** Warning: only generating code for nodes of MIB type INTEGER writing to bvcomAgentModules.h writing to bvcomAgentModules.c running indent on bvcomAgentModules.c running indent on bvcomAgentModules.h
7.通过 snmp_agent_api 编写守护程序 example-demon.c:
#include <net-snmp/net-snmp-config.h>
#include <net-snmp/net-snmp-includes.h>
#include <net-snmp/agent/net-snmp-agent-includes.h>
#include <signal.h>
#include "bvcomAgentModules.h"
static int keep_running;
RETSIGTYPE
stop_server(int a) {
keep_running = 0;
}
int
main (int argc, char **argv) {
int agentx_subagent=0; /* change this if you want to be a SNMP master agent */
int background = 0; /* change this if you want to run in the background */
int syslog = 0; /* change this if you want to use syslog */
/* print log errors to syslog or stderr */
if (syslog)
snmp_enable_calllog();
else
snmp_enable_stderrlog();
/* we're an agentx subagent? */
if (agentx_subagent) {
/* make us a agentx client. */
netsnmp_ds_set_boolean(NETSNMP_DS_APPLICATION_ID, NETSNMP_DS_AGENT_ROLE, 1);
}
/* run in background, if requested */
if (background && netsnmp_daemonize(1, !syslog))
exit(1);
/* Initialize tcpip, if necessary */
SOCK_STARTUP;
/* Initialize the agent library */
init_agent("example-demon"); // 配置文件名
/* Initialize our mib code here */
printf("Before init bvcomAgentModules \n");
init_bvcomAgentModules(); // 加载节点信息
printf("End init bvcomAgentModules \n");
/* initialize vacm/usm access control */
if (!agentx_subagent) {
void init_vacm_vars();
void init_usmUser();
}
/* Example-demon will be used to read example-demon.conf files. */
init_snmp("example-demon");
/* If we're going to be a snmp master agent, initial the ports */
if (!agentx_subagent)
init_master_agent(); /* open the port to listen on (defaults to udp:161) */
printf("---------------------\n");
/* In case we recevie a request to stop (kill -TERM or kill -INT) */
keep_running = 1;
signal(SIGTERM, stop_server);
signal(SIGINT, stop_server);
snmp_log(LOG_INFO,"example-demon is up and running.\n");
/* your main loop here... */
while(keep_running) {
/* if you use select(), see snmp_select_info() in snmp_api(3) */
/* --- OR --- */
agent_check_and_process(1); /* 0 == don't block */
}
/* at shutdown time */
snmp_shutdown("example-demon");
SOCK_CLEANUP;
return 0;
}
8.Makefile:
CC=gcc
OBJS2=example-demon.o bvcomAgentModules.o
TARGETS=example-demon
CFLAGS=-I. `net-snmp-config --cflags`
BUILDLIBS=`net-snmp-config --libs`
BUILDAGENTLIBS=`net-snmp-config --agent-libs`
# shared library flags (assumes gcc)
DLFLAGS=-fPIC -shared
all: $(TARGETS)
example-demon: $(OBJS2)
$(CC) -o example-demon $(OBJS2) $(BUILDAGENTLIBS)
clean:
rm $(OBJS2) $(OBJS2) $(TARGETS)
9.example-demon.conf:
############################################################################### # Access Control ############################################################################### # sec.name source community com2sec local localhost public com2sec mynetwork 192.168.0.0/24 public #### # Second, map the security names into group names: # sec.model sec.name group MyRWGroup v1 local group MyRWGroup v2c local group MyRWGroup usm local group MyROGroup v1 mynetwork group MyROGroup v2c mynetwork group MyROGroup usm mynetwork #### # Third, create a view for us to let the groups have rights to: # incl/excl subtree mask view all included .1 80 #### # Finally, grant the 2 groups access to the 1 view with different # write permissions: # context sec.model sec.level match read write notif access MyROGroup "" any noauth exact all none none access MyRWGroup "" any noauth exact all all none agentaddress 161
10.运行example-demon 时要用超级管理员运行，不然会出错:
sudo ./example-demon
a.没有用超级管理员时，报的错误:
border@debian:/work/border/snmp/example-demon$ ./example-demon netsnmp_assert !"registration != duplicate" failed agent_registry.c:535 netsnmp_subtree_load() netsnmp_assert !"registration != duplicate" failed agent_registry.c:535 netsnmp_subtree_load() netsnmp_assert !"registration != duplicate" failed agent_registry.c:535 netsnmp_subtree_load() Before init bvcomAgentModules End init bvcomAgentModules Error opening specified endpoint "161" --------------------- example-demon is up and running. read_config_store open failure on /var/net-snmp/example-demon.conf read_config_store open failure on /var/net-snmp/example-demon.conf read_config_store open failure on /var/net-snmp/example-demon.conf
b.如果 报Error opening specified endpoint “”错，说明example-demon.conf配置文件没有agentaddress 161
11.拷贝配置文件到 ~/.snmp/目录下:
cp example-demon.conf /home/border/.snmp/
12.sudo ./example-demon:
border@debian:~$ snmpwalk -v1 -c public localhost bvcom BVCOM-SYSTEMUPTIME-MIB::bvcomAgentModuleObject.0 = INTEGER: 68001 BVCOM-SYSTEMUPTIME-MIB::bvcomAgentSubagentObject.0 = INTEGER: 68002 BVCOM-SYSTEMUPTIME-MIB::bvcomAgentPluginObject.0 = INTEGER: 68003 End of MIB
验证:
border@debian:~$ snmpget -v1 -c public localhost bvcomAgentModuleObject.0 BVCOM-SYSTEMUPTIME-MIB::bvcomAgentModuleObject.0 = INTEGER: 68001 border@debian:~$ snmpgetnext -v1 -c public localhost bvcomAgentModuleObject.0 BVCOM-SYSTEMUPTIME-MIB::bvcomAgentSubagentObject.0 = INTEGER: 68002
13.支持snmpv3 在配置文件中增加:
rwuser border rwuser border1 createUser border MD5 "bvcombjbj" DES createUser border1 SHA "bvcombjbj" AES (最后一行也可以这样写：createUser border1 SHA "bvcombjbj" AES128)
通过如下命令验证:
a.验证MD5:
snmpwalk -v3 -l authPriv -u border -A bvcombjbj -X bvcombjbj localhost bvcom BVCOM-SYSTEMUPTIME-MIB::bvcomAgentModuleObject.0 = INTEGER: 68001 BVCOM-SYSTEMUPTIME-MIB::bvcomAgentSubagentObject.0 = INTEGER: 68002 BVCOM-SYSTEMUPTIME-MIB::bvcomAgentPluginObject.0 = INTEGER: 68003
b.验证SHA:
snmpwalk -v3 -l authPriv -u border1 -a SHA -x AES -A bvcombjbj -X bvcombjbj localhost bvcom BVCOM-SYSTEMUPTIME-MIB::bvcomAgentModuleObject.0 = INTEGER: 68001 BVCOM-SYSTEMUPTIME-MIB::bvcomAgentSubagentObject.0 = INTEGER: 68002 BVCOM-SYSTEMUPTIME-MIB::bvcomAgentPluginObject.0 = INTEGER: 68003
如果你采用的是AES128,就需要把-x AES改为-x AES128:
snmpwalk -v3 -l authPriv -u border1 -a SHA -x AES128 -A bvcombjbj -X bvcombjbj localhost bvcom
- 参考:
-
- 用NET-SNMP软件包开发简单客户端代理 http://b0rder.com/wiki/NetSnmp/NetSnmpSimpleAgentMib
- snmpd.examples 配置信息相关 http://www.net-snmp.org/docs/man/snmpd.examples.html
- snmp_agent_api http://www.net-snmp.org/docs/man/snmp_agent_api.html
- Tutorial http://www.nwsmith.net/HintsTips/net-snmp-tutorial.htm
- http://www.net-snmp.org/wiki/index.php/TUT:SNMPv3_Options
- By: Bian Jiang (borderj@gmail.com)
- From: http://www.b0rder.com
- Date: 2008.11.11
–EOF–
![[Google]]( http://wifihack.net/blog/wp-content/plugins/easy-adsense-lite/google-light.gif)
Recent Comments