SNMP4j与snmpv3响应,错误为null。

huangapple go评论53阅读模式
英文:

SNMP4j with snmpv3 response and error is null

问题

I'm using snmp4j 3.4.2 inside my java application (full code below)

I'm trying to execute a snmpget with snmpv3, security DES and auth MD5 and custom OID (python script, which is executed by snmp's extend funtionality). To create better understanding I used SnmpConstants.sysUpTime in the example below.

The SNMP resource has this user configured:

defSecurityName demo
defSecurityLevel authPriv
defAuthType MD5
defPrivType DES
defAuthPassphrase pass
defPrivPassphrase pass

I'm already using this user and resource to successfully perform the snmpget with python (pysnmp) and bash (snmpget), so I can definitely tell that my setup works and the java code is the problem.

I have two java classes (Listener.java and ServerStatusHelper.java)

Listener.java contains main and calls the snmpGet inside ServerStatusHelper.java, other code of Listener is excluded as its not neccessary.

import org.snmp4j.PDU;
import org.snmp4j.ScopedPDU;
import org.snmp4j.Snmp;
import org.snmp4j.Target;
import org.snmp4j.event.ResponseEvent;
import org.snmp4j.mp.SnmpConstants;
import org.snmp4j.security.AuthMD5;
import org.snmp4j.security.AuthSHA;
import org.snmp4j.security.PrivAES128;
import org.snmp4j.security.PrivDES;
import org.snmp4j.smi.OID;
import org.snmp4j.smi.VariableBinding;

public class Listener {

	public static void main(String[] args) {

		ServerStatusHelper agent = new ServerStatusHelper("host.tld", "udp", 161, "demo", "demo",
				"pass", "pass", new AuthMD5(), new PrivDES(), true);

		try {
			agent.startAgent();
			ResponseEvent response = agent.snmpGetOperation(SnmpConstants.sysUpTime);
			if (response != null) {
				System.out.println(
						"response null - error: "+ response.getError() +
                        "peerAddress: " + response.getPeerAddress()	+
                        "source: " + response.getSource().toString() +
                        "request: " + response.getRequest());
			}

		} catch (

		IOException e) {
			e.printStackTrace();

		}
	}

}

ServerStatusHelper.java

import java.io.IOException;

import org.snmp4j.CommunityTarget;
import org.snmp4j.PDU;
import org.snmp4j.ScopedPDU;
import org.snmp4j.Snmp;
import org.snmp4j.TransportMapping;
import org.snmp4j.UserTarget;
import org.snmp4j.event.ResponseEvent;
import org.snmp4j.mp.MPv3;
import org.snmp4j.mp.SnmpConstants;
import org.snmp4j.security.AuthGeneric;
import org.snmp4j.security.AuthMD5;
import org.snmp4j.security.PrivDES;
import org.snmp4j.security.PrivacyGeneric;
import org.snmp4j.security.SecurityLevel;
import org.snmp4j.security.SecurityModels;
import org.snmp4j.security.SecurityProtocols;
import org.snmp4j.security.USM;
import org.snmp4j.security.UsmUser;
import org.snmp4j.smi.Address;
import org.snmp4j.smi.GenericAddress;
import org.snmp4j.smi.OID;
import org.snmp4j.smi.OctetString;
import org.snmp4j.smi.TransportIpAddress;
import org.snmp4j.smi.VariableBinding;
import org.snmp4j.transport.DefaultTcpTransportMapping;
import org.snmp4j.transport.DefaultUdpTransportMapping;

public class ServerStatusHelper {

	private Address nmsIP;
	private String user;
	private String securityName;
	private String privacyPassword;
	private String authorizationPassword;
	private AuthGeneric authProtocol;
	private PrivacyGeneric privacyProtocol;
	private String protocol;
	private boolean encryption;

	private long timeOut = 1000;
	private int noOfRetries = 10;

	private Snmp snmp;
	private UserTarget target;
	private CommunityTarget v1target;
	
	ServerStatusHelper(String ip, String protocol, int snmpPort, String username, String securityName,
			String privacyPassword, String authPassowrd, AuthGeneric authProtocol, PrivacyGeneric privacyProtocol,
			boolean encryption) {

		nmsIP = GenericAddress.parse(protocol + ":" + ip + "/" + snmpPort);
		System.out.println("NMS IP set : " + nmsIP.toString());

		this.protocol = protocol;
		this.user = username;
		this.securityName = securityName;
		this.privacyPassword = privacyPassword;
		this.authorizationPassword = authPassowrd;
		this.authProtocol = authProtocol;
		this.privacyProtocol = privacyProtocol;
		this.encryption = encryption;
		
		SecurityProtocols.getInstance().addAuthenticationProtocol(new AuthMD5());
		SecurityProtocols.getInstance().addPrivacyProtocol(new PrivDES());

	}

	public void startAgent() throws IOException {
		if (snmp == null) {

			TransportMapping<? extends TransportIpAddress> transport = null;

			if (protocol.equalsIgnoreCase("udp")) {
				System.out.println("UDP Protocol selected.");
				transport = new DefaultUdpTransportMapping();
			} else {
				System.out.println("TCP Protocol selected.");
				transport = new DefaultTcpTransportMapping();
			}

			snmp = new Snmp(transport);

			USM usm = new USM(SecurityProtocols.getInstance(), new OctetString(MPv3.createLocalEngineID()), 0);
			SecurityModels.getInstance().addSecurityModel(usm);

			transport.listen();

			snmp.getUSM().addUser(new OctetString(user),
					new UsmUser(new OctetString(securityName), authProtocol.getID(),
							new OctetString(authorizationPassword), privacyProtocol.getID(),
							new OctetString(privacyPassword)));

			if (encryption)
				target = createUserTarget();
			else
				v1target = createUserTargetWithoutEncryption();
		}

	}

	public ResponseEvent snmpSetOperation(VariableBinding[] vars) throws IOException {
		PDU setPdu = new ScopedPDU();
		for (VariableBinding variableBinding : vars) {
			setPdu.add(variableBinding);
		}
		return snmp.send(setPdu, target);
	}

	public ResponseEvent snmpGetOperation(OID oid) throws IOException {

		if (encryption) {
			PDU getPdu = new ScopedPDU();
			getPdu.add(new VariableBinding(oid));
			getPdu.setType(ScopedPDU.GET);
			return snmp.get(getPdu, target);

		} else {
			PDU getPdu = new PDU();
			getPdu.add(new VariableBinding(oid));
			getPdu.setType(PDU.GET);
			return snmp.get(getPdu, v1target);

		}

	}

	private UserTarget createUserTarget() {
		UserTarget target = new UserTarget();
		target.setAddress(nmsIP);
		target.setRetries(noOfRetries);
	

<details>
<summary>英文:</summary>

I&#39;m using **snmp4j 3.4.2** inside my java application (full code below)

I&#39;m trying to execute a **snmpget** with snmpv3, security **DES** and auth **MD5** and custom OID (python script, which is executed by snmp&#39;s *extend* funtionality). To create better understanding I used *SnmpConstants.sysUpTime* in the example below.

The SNMP resource has this user configured:

defSecurityName demo
defSecurityLevel authPriv
defAuthType MD5
defPrivType DES
defAuthPassphrase pass
defPrivPassphrase pass

I&#39;m already using this user and resource to successfully perform the snmpget with **python** (*pysnmp*) and **bash** (*snmpget*), so I can definitely tell that my setup works and the java code is the problem.
I have two java classes (Listener.java and ServerStatusHelper.java)
Listener.java contains main and calls the snmpGet inside ServerStatusHelper.java, other code of Listener is excluded as its not neccessary.

import org.snmp4j.PDU;
import org.snmp4j.ScopedPDU;
import org.snmp4j.Snmp;
import org.snmp4j.Target;
import org.snmp4j.event.ResponseEvent;
import org.snmp4j.mp.SnmpConstants;
import org.snmp4j.security.AuthMD5;
import org.snmp4j.security.AuthSHA;
import org.snmp4j.security.PrivAES128;
import org.snmp4j.security.PrivDES;
import org.snmp4j.smi.OID;
import org.snmp4j.smi.VariableBinding;

public class Listener {

public static void main(String[] args) {
ServerStatusHelper agent = new ServerStatusHelper(&quot;host.tld&quot;, &quot;udp&quot;, 161, &quot;demo&quot;, &quot;demo&quot;,
&quot;pass&quot;, &quot;pass&quot;, new AuthMD5(), new PrivDES(), true);
try {
agent.startAgent();
ResponseEvent response = agent.snmpGetOperation(SnmpConstants.sysUpTime);
if (response != null) {
System.out.println(
&quot;response null - error: &quot;+ response.getError() +
&quot;peerAddress: &quot; + response.getPeerAddress()	+
&quot;source: &quot; + response.getSource().toString() +
&quot;request: &quot; + response.getRequest());
}
} catch (
IOException e) {
e.printStackTrace();
}
}

}


ServerStatusHelper.java

import java.io.IOException;

import org.snmp4j.CommunityTarget;
import org.snmp4j.PDU;
import org.snmp4j.ScopedPDU;
import org.snmp4j.Snmp;
import org.snmp4j.TransportMapping;
import org.snmp4j.UserTarget;
import org.snmp4j.event.ResponseEvent;
import org.snmp4j.mp.MPv3;
import org.snmp4j.mp.SnmpConstants;
import org.snmp4j.security.AuthGeneric;
import org.snmp4j.security.AuthMD5;
import org.snmp4j.security.PrivDES;
import org.snmp4j.security.PrivacyGeneric;
import org.snmp4j.security.SecurityLevel;
import org.snmp4j.security.SecurityModels;
import org.snmp4j.security.SecurityProtocols;
import org.snmp4j.security.USM;
import org.snmp4j.security.UsmUser;
import org.snmp4j.smi.Address;
import org.snmp4j.smi.GenericAddress;
import org.snmp4j.smi.OID;
import org.snmp4j.smi.OctetString;
import org.snmp4j.smi.TransportIpAddress;
import org.snmp4j.smi.VariableBinding;
import org.snmp4j.transport.DefaultTcpTransportMapping;
import org.snmp4j.transport.DefaultUdpTransportMapping;

public class ServerStatusHelper {

private Address nmsIP;
private String user;
private String securityName;
private String privacyPassword;
private String authorizationPassword;
private AuthGeneric authProtocol;
private PrivacyGeneric privacyProtocol;
private String protocol;
private boolean encryption;
private long timeOut = 1000;
private int noOfRetries = 10;
private Snmp snmp;
private UserTarget target;
private CommunityTarget v1target;
ServerStatusHelper(String ip, String protocol, int snmpPort, String username, String securityName,
String privacyPassword, String authPassowrd, AuthGeneric authProtocol, PrivacyGeneric privacyProtocol,
boolean encryption) {
nmsIP = GenericAddress.parse(protocol + &quot;:&quot; + ip + &quot;/&quot; + snmpPort);
System.out.println(&quot;NMS IP set : &quot; + nmsIP.toString());
this.protocol = protocol;
this.user = username;
this.securityName = securityName;
this.privacyPassword = privacyPassword;
this.authorizationPassword = authPassowrd;
this.authProtocol = authProtocol;
this.privacyProtocol = privacyProtocol;
this.encryption = encryption;
SecurityProtocols.getInstance().addAuthenticationProtocol(new AuthMD5());
SecurityProtocols.getInstance().addPrivacyProtocol(new PrivDES());
}
public void startAgent() throws IOException {
if (snmp == null) {
TransportMapping&lt;? extends TransportIpAddress&gt; transport = null;
if (protocol.equalsIgnoreCase(&quot;udp&quot;)) {
System.out.println(&quot;UDP Protocol selected.&quot;);
transport = new DefaultUdpTransportMapping();
} else {
System.out.println(&quot;TCP Protocol selected.&quot;);
transport = new DefaultTcpTransportMapping();
}
snmp = new Snmp(transport);
USM usm = new USM(SecurityProtocols.getInstance(), new OctetString(MPv3.createLocalEngineID()), 0);
SecurityModels.getInstance().addSecurityModel(usm);
transport.listen();
snmp.getUSM().addUser(new OctetString(user),
new UsmUser(new OctetString(securityName), authProtocol.getID(),
new OctetString(authorizationPassword), privacyProtocol.getID(),
new OctetString(privacyPassword)));
if (encryption)
target = createUserTarget();
else
v1target = createUserTargetWithoutEncryption();
}
}
public ResponseEvent snmpSetOperation(VariableBinding[] vars) throws IOException {
PDU setPdu = new ScopedPDU();
for (VariableBinding variableBinding : vars) {
setPdu.add(variableBinding);
}
return snmp.send(setPdu, target);
}
public ResponseEvent snmpGetOperation(OID oid) throws IOException {
if (encryption) {
PDU getPdu = new ScopedPDU();
getPdu.add(new VariableBinding(oid));
getPdu.setType(ScopedPDU.GET);
return snmp.get(getPdu, target);
} else {
PDU getPdu = new PDU();
getPdu.add(new VariableBinding(oid));
getPdu.setType(PDU.GET);
return snmp.get(getPdu, v1target);
}
}
private UserTarget createUserTarget() {
UserTarget target = new UserTarget();
target.setAddress(nmsIP);
target.setRetries(noOfRetries);
target.setTimeout(timeOut);
target.setVersion(SnmpConstants.version3);
target.setSecurityLevel(SecurityLevel.AUTH_PRIV);
target.setSecurityName(new OctetString(securityName));
return target;
}
private CommunityTarget createUserTargetWithoutEncryption() {
CommunityTarget target = new CommunityTarget();
target.setCommunity(new OctetString(&quot;public&quot;));
target.setAddress(nmsIP);
target.setRetries(noOfRetries);
target.setTimeout(timeOut);
target.setVersion(SnmpConstants.version1);
return target;
}
public long getTimeOut() {
return timeOut;
}
public void setTimeOut(long timeOut) {
this.timeOut = timeOut;
}
public int getNoOfRetries() {
return noOfRetries;
}
public void setNoOfRetries(int noOfRetries) {
this.noOfRetries = noOfRetries;
}

}


The execution of the program exits with

NMS IP set : IPREMOVED/161
UDP Protocol selected.
response null - error: nullpeerAddress: IPREMOVED/161source: org.snmp4j.Snmp@e580929 request: GET[{contextEngineID=80:00:1f:88:80:5e:2e:49:07:2f:68:44:57:00:00:00:00, contextName=}, requestID=588252045, errorStatus=0, errorIndex=0, VBS[1.3.6.1.2.1.1.3.0 = Null]]


Anyone has an idea what I&#39;m doing wrong?
Edit:
From the servers syslog I can see, that the request arrives at the resource:

Jul 31 11:52:46 loadbalancer snmpd[1219]: Connection from UDP: [IP REMOVED]:54734->[IP REMOVED]:161
Jul 31 11:52:46 loadbalancer snmpd[1219]: Connection from UDP: [IP REMOVED]:54734->[IP REMOVED]:161


</details>
# 答案1
**得分**: 3
@i-shm,我认为你的一切都做得很好。
你的代码中唯一可能出问题的地方可能就是评估 ```response``` 变量的那一行。你指的是 ```response != null```,但实际上应该是 ```response == null```。我的意思是:
```java
import org.snmp4j.PDU;
import org.snmp4j.ScopedPDU;
import org.snmp4j.Snmp;
import org.snmp4j.Target;
import org.snmp4j.event.ResponseEvent;
import org.snmp4j.mp.SnmpConstants;
import org.snmp4j.security.AuthMD5;
import org.snmp4j.security.AuthSHA;
import org.snmp4j.security.PrivAES128;
import org.snmp4j.security.PrivDES;
import org.snmp4j.smi.OID;
import org.snmp4j.smi.VariableBinding;
public class Listener {
public static void main(String[] args) {
ServerStatusHelper agent = new ServerStatusHelper("host.tld", "udp", 161, "demo", "demo",
"pass", "pass", new AuthMD5(), new PrivDES(), true);
try {
agent.startAgent();
ResponseEvent event = agent.snmpGetOperation(SnmpConstants.sysUpTime);
final PDU response = event.getResponse();
if (response == null) {
System.out.println(
"response null - error: "+ event.getError() +
"peerAddress: " + event.getPeerAddress() +
"source: " + event.getSource().toString() +
"request: " + event.getRequest());
} else {
System.out.println("Response PDU:" + response.toString());
// Process the response as you need, maybe something like this:
long sysUpTime = response.get(0).getVariable().toLong();
// You can find relevant information in the javadocs of the library:
// https://agentpp.com/doc/snmp4j/index.html?org/snmp4j/package-summary.html
}
} catch (IOException e) {
e.printStackTrace();
}
}
}

这就是为什么你在Java代码中没有收到错误,而且你的系统日志显示实际上已经发送了请求。

英文:

@i-shm I think you are doing everything ok.

The only problem in your code could be just the line in which you evaluate the response variable. Your are indicating response != null when it should be actually response == null. I mean:

import org.snmp4j.PDU;
import org.snmp4j.ScopedPDU;
import org.snmp4j.Snmp;
import org.snmp4j.Target;
import org.snmp4j.event.ResponseEvent;
import org.snmp4j.mp.SnmpConstants;
import org.snmp4j.security.AuthMD5;
import org.snmp4j.security.AuthSHA;
import org.snmp4j.security.PrivAES128;
import org.snmp4j.security.PrivDES;
import org.snmp4j.smi.OID;
import org.snmp4j.smi.VariableBinding;

public class Listener {

    public static void main(String[] args) {

        ServerStatusHelper agent = new ServerStatusHelper(&quot;host.tld&quot;, &quot;udp&quot;, 161, &quot;demo&quot;, &quot;demo&quot;,
                &quot;pass&quot;, &quot;pass&quot;, new AuthMD5(), new PrivDES(), true);

        try {
            agent.startAgent();
            ResponseEvent event = agent.snmpGetOperation(SnmpConstants.sysUpTime);
            final PDU response = event.getResponse();
            if (response == null) {
                System.out.println(
                        &quot;response null - error: &quot;+ event.getError() +
                        &quot;peerAddress: &quot; + event.getPeerAddress() +
                        &quot;source: &quot; + event.getSource().toString() +
                        &quot;request: &quot; + event.getRequest());
            } else {
              System.out.println(&quot;Response PDU:&quot; + response.toString());
              // Process the response as you need, maybe something like this:
              long sysUpTime = response.get(0).getVariable().toLong();
              // You can find relevant information in the javadocs of the library:
              // https://agentpp.com/doc/snmp4j/index.html?org/snmp4j/package-summary.html
            }

        } catch (IOException e) {
            e.printStackTrace();

        }
    }

}

This is why you do not receive errors in the java code and your syslog indicates that the requests were actually sent.

huangapple
  • 本文由 发表于 2020年7月31日 18:11:30
  • 转载请务必保留本文链接:https://go.coder-hub.com/63189862.html
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定