Comments (31)
HoneyryderChuck
commented on September 23, 2024
3
@fwininger @jinxka it's done. Although my fixes from yesterday fixed the exception issue, there was still a last remaining handshake problem that I have solved with my last commit (for details, please read the commit message).
I'll be releasing a new version in the coming days. Thank you for the collaboration.
from ruby-netsnmp.
HoneyryderChuck
commented on September 23, 2024
1
@jinxka I found the issue!
If you look at the "received message" section you pasted, you'll notice that the response PDU is already there, which shouldn't happen if the packet were encrypted.
Analysing the v3 message content further, you'll see that the 3rd field of the header, which accounts for message flags, comes with "0401", and the least significant byte accounts for security level, which is 1, which is "auth_no_priv". So, your node is sending the response packet authenticated but not encrypted.
The bug happens because I'm using the info of the sender (you) only to determine the security level, and this seems to be what's causing the issue.
I'll fix it as soon as I find some time, and then I'll ask you to try again.
from ruby-netsnmp.
HoneyryderChuck
commented on September 23, 2024
Hi @tamiradari , thank you for the report.
Could you fill me in on the following:
- which version of
ruby-netsnmpare you on? - which version of
rubyare you on? - Could you paste the full error backtrace?
- Do you feel confortable forking/pulling from this repository and running your script locally with patches suggested by me, as we follow up?
from ruby-netsnmp.
tamiradari
commented on September 23, 2024
Hi Tiago,
Please find the details:
* Latest
* ruby 2.6.5p114 (2019-10-01 revision 67812) [x86_64-darwin18]
* Added to the end
* Yes
NETSNMP::SecurityParameters.verify(stream#String, salt#String) at /Users/tamiradari/dev/Frontend/lib/netsnmp/security_parameters.rb:127
#<Class:NETSNMP::Message>.decode(stream#String, security_parameters#NETSNMP::SecurityParameters) at /Users/tamiradari/dev/Frontend/lib/netsnmp/message.rb:29
NETSNMP::V3Session.decode(stream#String, security_parameters#NETSNMP::SecurityParameters) at /Users/tamiradari/dev/Frontend/lib/netsnmp/v3_session.rb:78
NETSNMP::V3Session.send(pdu#NETSNMP::ScopedPDU) at /Users/tamiradari/dev/Frontend/lib/netsnmp/v3_session.rb:25
block in NETSNMP::Client.block in get(*oid_opts#Array) at /Users/tamiradari/dev/Frontend/lib/netsnmp/client.rb:55
NETSNMP::Client.handle_retries at /Users/tamiradari/dev/Frontend/lib/netsnmp/client.rb:155
NETSNMP::Client.get(*oid_opts#Array) at /Users/tamiradari/dev/Frontend/lib/netsnmp/client.rb:55
Thanks,
Tamir.
from ruby-netsnmp.
HoneyryderChuck
commented on September 23, 2024
My first suspicion is that cleaning the auth bytes isn't being done as it's supposed to, for some reason. I'd breakpoint around this code, as there seems to be something fishier around the verification of the response bytestream and the auth param. The procedure followed here is described in this section nof the RFC.
I'd also try doing the request with v2c, just to make sure that it's an authentication issue, and not some encoding incompatibility.
from ruby-netsnmp.
tamiradari
commented on September 23, 2024
Hi Tiago,
I am not familiar with the RFC details.
I compared the first packet send from the gem and another tool that works for me.
There is similarity but seems like extra data of 12 x ‘00’ got in the middle.
Hope this can give you a way to deeper understanding.
netsnmp gem:
30 4e 02 01 03 30 11 02 04 46 ff de dd 02 03 00
ff e3 04 01 04 02 01 03 04 20 30 1e 04 00 02 01
00 02 01 00 04 04 73 77 72 6f 04 0c 00 00 00 00
00 00 00 00 00 00 00 00 04 00 30 14 04 00 04 00
a0 0e 02 04 14 1f d7 a9 02 01 00 02 01 00 30 00
Sending 64 bytes to UDP (http://www.net-snmp.org/ snmp-get):
30 3E 02 01 03 30 11 02 04 72 C3 42 43 02 03 00
FF E3 04 01 04 02 01 03 04 10 30 0E 04 00 02 01
00 02 01 00 04 00 04 00 04 00 30 14 04 00 04 00
A0 0E 02 04 70 3C C0 1A 02 01 00 02 01 00 30 00
Thanks,
Tamir.
from ruby-netsnmp.
HoneyryderChuck
commented on September 23, 2024
The first packet is the probe, and that doesn't seem to be the issue AFAICT, i.e. the problem is when receiving its response and verifying the signature. This is where the exchange happens.
If you set up a breakpoint here, you'll be able to see the returned bytestream to the probe PDU, and check whether the "auth_param" can be found and replaced, before being verified.
netsnmp supports hexdumping a bytestream directly, provided you install the "hexdump" gem. I wanted years ago to add proper debug output of PDU packets, but sadly never finished that work.
from ruby-netsnmp.
jinxka
commented on September 23, 2024
Hello,
I have the same kind of issue with my Cisco ASA and Cisco NX-OS using snmp v3. They are working fine with snmpwalk and snmpget but not with the gem.
netsnmp gem:
306f 0201 0330 1102 044c bff6 8202 0300
ffe3 0401 0002 0103 0425 3023 040b 8000
0009 030c 6d15 d7e4 0002 0100 0201 0004
0a63 7962 6572 7761 7463 6804 0004 0030
3004 0b80 0000 0903 0c6d 15d7 e400 0400
a81f 0204 189b d51a 0201 0002 0100 3011
300f 060a 2b06 0106 030f 0101 0400 4101
snmpget:
3065 0201 0330 1102 045A 40FD 3202 0300
FFE3 0401 0002 0103 041B 3019 040B 8000
0009 030C 6D15 D7E4 0002 0100 0201 0004
0004 0004 0030 3004 0B80 0000 0903 0C6D
15D7 E400 0400 A81F 0204 0D70 C3B9 0201
0002 0100 3011 300F 060A 2B06 0106 030F
0101 0400 4101 42
I used byebug like you said in the comment above, the variables are:
auth_param= ''
priv_param=''
engine_boots=0
engine_time=0
It seems there is an issue with the probe, but I don't know if it's an issue with the gem or with the snmp implementation on those devices.
You can test this with a Cisco ASA or NX-OS on gns3 (this is how we test it).
Also if you prefer we can expose one of our device.
from ruby-netsnmp.
HoneyryderChuck
commented on September 23, 2024
Hi @jinxka ,
Thank you for the investigation. If the issue is the probe PDU, let's try finding out whats going on here.
First, are you having the same issue using the des/md5 combo?
Now, let's dissect this:
306f 0201 0330 1102 044c bff6 8202 0300
ffe3 0401 0002 0103 0425 3023 040b 8000
0009 030c 6d15 d7e4 0002 0100 0201 0004
0a63 7962 6572 7761 7463 6804 0004 0030
3004 0b80 0000 0903 0c6d 15d7 e400 0400
a81f 0204 189b d51a 0201 0002 0100 3011
300f 060a 2b06 0106 030f 0101 0400 4101
306f: that's the sequence ASN header0201: thats the message version0330 .. (19 octets) .. 0201: thats the v3 message header0004 .. (11 octets) .. 0903: thats the security params section0c6d .. EOF: that's the scoped SNMP PDU, generated here
Looking at the diff, I can spot a few things:
- the security params section doesn't have the same bytesize;
- the scoped pdu section doesn't have the same bytesize;
I can't really tell how this came to be. However, I'd try to "reverse-engineer" how the probe PDU is being assembled by the netsnmp cli tool (if I remember correctly, there's a debug level at which you can get the initial PDU and the random ids used to generate the salt/scoped_pdu, after which you could hammer these values into ruby-netsnmp and come up with similar packets.
I'd also troubleshoot first whether using v2c would solve the trick, if that's possible.
from ruby-netsnmp.
HoneyryderChuck
commented on September 23, 2024
Also if you prefer we can expose one of our device.
If my comments don't help you troubleshoot it, we can go that route, if that's ok from a security perspective. I'd need the full snmpget cli line you'd use to get the correct answer, though.
from ruby-netsnmp.
jinxka
commented on September 23, 2024
I tried with MD5/DES but it's not working (NETSNMP::Error (invalid encrypted PDU received)).
Here is the full debug of the working snmpget with SHA/AES:
snmpget -v3 -u 'cyberwatch' -l AuthPriv -A 'blop1234!' -a SHA -X 'blop1234!' -x 'AES' '10.10.1.220' '1.3.6.1.2.1.1.5.0' -d
Sending 63 bytes to UDP: [10.10.1.220]:161->[0.0.0.0]:0
0000: 30 3D 02 01 03 30 10 02 04 12 26 E2 DE 02 02 05 0=...0....&.....
0016: C0 04 01 04 02 01 03 04 10 30 0E 04 00 02 01 00 .........0......
0032: 02 01 00 04 00 04 00 04 00 30 14 04 00 04 00 A0 .........0......
0048: 0E 02 04 2E 7C 96 01 02 01 00 02 01 00 30 00 ....|........0.
Received 103 byte packet from UDP: [10.10.1.220]:161->[0.0.0.0]:33890
0000: 30 65 02 01 03 30 11 02 04 12 26 E2 DE 02 03 00 0e...0....&.....
0016: FF E3 04 01 00 02 01 03 04 1B 30 19 04 0B 80 00 ..........0.....
0032: 00 09 03 0C 6D 15 D7 E4 00 02 01 00 02 01 00 04 ....m...........
0048: 00 04 00 04 00 30 30 04 0B 80 00 00 09 03 0C 6D .....00........m
0064: 15 D7 E4 00 04 00 A8 1F 02 04 2E 7C 96 01 02 01 ...........|....
0080: 00 02 01 00 30 11 30 0F 06 0A 2B 06 01 06 03 0F ....0.0...+.....
0096: 01 01 04 00 41 01 65 ....A.e
Sending 132 bytes to UDP: [10.10.1.220]:161->[0.0.0.0]:0
0000: 30 81 81 02 01 03 30 10 02 04 12 26 E2 DD 02 02 0.....0....&....
0016: 05 C0 04 01 07 02 01 03 04 39 30 37 04 0B 80 00 .........907....
0032: 00 09 03 0C 6D 15 D7 E4 00 02 01 00 02 01 00 04 ....m...........
0048: 0A 63 79 62 65 72 77 61 74 63 68 04 0C 1D CC 28 .cyberwatch....(
0064: DC 14 25 F7 F8 51 79 39 FC 04 08 C4 8B A1 F3 8E ..%..Qy9........
0080: B1 0B C6 04 2F B0 A0 DA BB E2 97 AF 86 F7 11 3B ..../..........;
0096: 2E 81 6E CD 44 CC 2D 4B CE C6 27 BA 91 87 4D 9A ..n.D.-K..'...M.
0112: 47 6F 00 04 90 29 88 DF E8 AA 87 6F E3 1E 6E 1E Go...).....o..n.
0128: 4C B8 70 A9 L.p.
Received 124 byte packet from UDP: [10.10.1.220]:161->[0.0.0.0]:33890
0000: 30 7A 02 01 03 30 11 02 04 12 26 E2 DD 02 03 00 0z...0....&.....
0016: FF E3 04 01 01 02 01 03 04 33 30 31 04 0B 80 00 .........301....
0032: 00 09 03 0C 6D 15 D7 E4 00 02 01 02 02 03 02 D3 ....m...........
0048: 5E 04 0A 63 79 62 65 72 77 61 74 63 68 04 0C A5 ^..cyberwatch...
0064: 59 BC 45 52 92 E9 AB D4 C2 70 07 04 00 30 2D 04 Y.ER.....p...0-.
0080: 0B 80 00 00 09 03 0C 6D 15 D7 E4 00 04 00 A8 1C .......m........
0096: 02 01 00 02 01 00 02 01 00 30 11 30 0F 06 0A 2B .........0.0...+
0112: 06 01 06 03 0F 01 01 02 00 41 01 6E .........A.n
Sending 134 bytes to UDP: [10.10.1.220]:161->[0.0.0.0]:0
0000: 30 81 83 02 01 03 30 10 02 04 12 26 E2 DF 02 02 0.....0....&....
0016: 05 C0 04 01 07 02 01 03 04 3B 30 39 04 0B 80 00 .........;09....
0032: 00 09 03 0C 6D 15 D7 E4 00 02 01 02 02 03 02 D3 ....m...........
0048: 5E 04 0A 63 79 62 65 72 77 61 74 63 68 04 0C 3C ^..cyberwatch..<
0064: F3 6F 44 E2 73 95 96 A6 B9 BA B6 04 08 C4 8B A1 .oD.s...........
0080: F3 8E B1 0B C7 04 2F 31 8C D3 0F 10 F7 9C 94 58 ....../1.......X
0096: AC BE DB 0F AE CF B5 97 67 E2 BE 5A 15 47 CF 41 ........g..Z.G.A
0112: A2 82 00 C9 C2 0A 5E BB 6A B3 DF AF E5 E7 A2 04 ......^.j.......
0128: 88 2B C4 00 26 13 .+..&.
Received 141 byte packet from UDP: [10.10.1.220]:161->[0.0.0.0]:33890
0000: 30 81 8A 02 01 03 30 11 02 04 12 26 E2 DF 02 03 0.....0....&....
0016: 00 FF E3 04 01 03 02 01 03 04 3B 30 39 04 0B 80 ..........;09...
0032: 00 00 09 03 0C 6D 15 D7 E4 00 02 01 02 02 03 02 .....m..........
0048: D3 5E 04 0A 63 79 62 65 72 77 61 74 63 68 04 0C .^..cyberwatch..
0064: 8B 37 DF 2E 60 35 55 29 DB 29 1B 4E 04 08 81 BA .7..`5U).).N....
0080: 9F 22 D9 CE 42 0D 04 35 4C E0 C5 F7 43 51 73 0D ."..B..5L...CQs.
0096: 96 90 14 B5 D8 70 E2 30 DE C4 BF E0 67 91 6C 84 .....p.0....g.l.
0112: D6 FA 2C 51 A6 CC 93 F6 A2 4F A6 05 3B 45 43 87 ..,Q.....O..;EC.
0128: 58 AC 64 75 CD CA B7 B2 56 84 64 CB A3 X.du....V.d..
iso.3.6.1.2.1.1.5.0 = STRING: "switch"
To test the gem, I put byebug at:
ruby-netsnmp/lib/netsnmp/message.rb
Line 79 in 9d47f0b
and
ruby-netsnmp/lib/netsnmp/message.rb
Line 27 in 9d47f0b
Before the encoded packet is sent, I force it's value to the one sent by snmpget.
For the first transaction, I changed the 63 bytes sent by snmpget to
"0=\x02\x01\x030\x10\x02\x04.30\x05\x02\x02\x05\xC0\x04\x01\x04\x02\x01\x03\x04\x100\x0E\x04\x00\x02\x01\x00\x02\x01\x00\x04\x00\x04\x00\x04\x000\x14\x04\x00\x04\x00\xA0\x0E\x02\x04\x18.\xFAL\x02\x01\x00\x02\x01\x000\x00"
using Array.pack('H*') and saved it in the variable encoded.
Following this I checked the bytes packet received and it's identical to the one received by snmpget minus the last 2 digit (65 in above result). I don't know the impact of the missing part.
I used the same process for the second transaction and this time I got more differences (you can compare with the above snmpget result, second packet received) :
307a 0201 0330 1102 042e 3330 0402 0300
ffe3 0401 0102 0103 0433 3031 040b 8000
0009 030c 6d15 d7e4 0002 0102 0203 02cd
ee04 0a63 7962 6572 7761 7463 6804 0ce1
0610 969f 3a20 ea63 a1e9 0f04 0030 2d04
0b80 0000 0903 0c6d 15d7 e400 0400 a81c
0201 0002 0100 0201 0030 1130 0f06 0a2b
0601 0603 0f01 0102 0041 0166
After this, there are no third transaction like in snmpget because the error NETSNMP::Error (invalid priv salt received) is raised.
I'll try to decode the above and send you an access to one of our Cisco (there are no security issues as there are empty and only used for snmp testing)
from ruby-netsnmp.
HoneyryderChuck
commented on September 23, 2024
Perfect, thank you for the dumps. Will see if I can do some "replay" there in the next week or so.
from ruby-netsnmp.
HoneyryderChuck
commented on September 23, 2024
@jinxka I've just pushed some debug log improvements into the issue-40 branch. Would you mind running your example again using it, with the env var NETSNMP_DEBUG=2, and paste me the dumps?
from ruby-netsnmp.
jinxka
commented on September 23, 2024
Hello,
Sorry for the late answer, here is the the dumps using branch 'issue-40' with NETSNMP_DEBUG=2
a.get(oid: '1.3.6.1.2.1.1.5.0')
sending probe...
Traceback (most recent call last):
16: from /usr/share/rvm/rubies/ruby-2.7.0/bin/irb:23:in `load'
15: from /usr/share/rvm/rubies/ruby-2.7.0/lib/ruby/gems/2.7.0/gems/irb-1.2.1/exe/irb:11:in `<top (required)>'
14: from (irb):2
13: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/client.rb:54:in `get'
12: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/v3_session.rb:18:in `build_pdu'
11: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/v3_session.rb:55:in `security_parameters'
10: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/v3_session.rb:66:in `probe_for_engine'
9: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/message.rb:72:in `encode'
8: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/message.rb:137:in `log'
7: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/message.rb:72:in `block in encode'
6: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/pdu.rb:93:in `to_hex'
5: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp.rb:85:in `to_hex'
4: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp.rb:85:in `map'
3: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp.rb:76:in `to_hex'
2: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp.rb:118:in `colorize_hex'
1: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp.rb:70:in `block in <module:ASNExtensions>'
NoMethodError (undefined method `name' for :engine_id:Symbol)
from ruby-netsnmp.
HoneyryderChuck
commented on September 23, 2024
@jinxka can you try again. sorry, there was a bug in the log layer...
from ruby-netsnmp.
jinxka
commented on September 23, 2024
a.get(oid: '1.3.6.1.2.1.1.5.0')
sending probe...
Traceback (most recent call last):
16: from /usr/share/rvm/rubies/ruby-2.7.0/bin/irb:23:in `load'
15: from /usr/share/rvm/rubies/ruby-2.7.0/lib/ruby/gems/2.7.0/gems/irb-1.2.1/exe/irb:11:in `<top (required)>'
14: from (irb):2
13: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/client.rb:54:in `get'
12: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/v3_session.rb:18:in `build_pdu'
11: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/v3_session.rb:55:in `security_parameters'
10: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/v3_session.rb:66:in `probe_for_engine'
9: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/message.rb:72:in `encode'
8: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/message.rb:137:in `log'
7: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/message.rb:72:in `block in encode'
6: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/pdu.rb:93:in `to_hex'
5: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp.rb:84:in `to_hex'
4: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp.rb:84:in `map'
3: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp.rb:75:in `to_hex'
2: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp.rb:117:in `colorize_hex'
1: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp.rb:69:in `block in <module:ASNExtensions>'
NoMethodError (undefined method `split' for :engine_id:Symbol)
Can we use your email address to send you the info so you can connect to one of our cisco device?
from ruby-netsnmp.
HoneyryderChuck
commented on September 23, 2024
I've fixed this one. But it's alright, you can send (do send me the ruby script ready to execute, plz).
from ruby-netsnmp.
jinxka
commented on September 23, 2024
a.get(oid: '1.3.6.1.2.1.1.5.0')
sending probe...
pdu: 3014
engine_id: 0400 ("")
context: 0400 ("")
request: a00e
request_id: 0204 4ad1 34e3 ("1255224547")
error: 0201 ("0")
error_index: 0201 ("0")
varbinds: 3000
encoding PDU in V3 message...
security_params: 3025
engine_id: 0400 ("")
engine_boots: 0201 ("0")
engine_time: 0201 ("0")
username: 040b 6379 6265 7277 6174 6368 ("cyberwatch4")
auth_mask: 040c 0000 0000 0000 0000 0000 0000 ("\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000")
OctetString: 0400 ("")
v3_message: 3055
message_version: 0201 ("3")
headers: 3011
message_id: 0204 19cd d15c ("432918876")
max_message_size: 0203 00ff ("65507")
message_flags: 0401 ("\x04")
security_model: 0201 ("3")
security_params: 0427 3025 0400 0201 0002 0100 040b 6379 6265 7277 6174 6368 3404 0c00 0000 0000 0000 0000 0000 0004 ("0%\x04\x00\x02\x01\x00\x02\x01\x00\x04\vcyberwatch4\x04\f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00")
pdu: 3014
engine_id: 0400 ("")
context: 0400 ("")
request: a00e
request_id: 0204 4ad1 34e3 ("1255224547")
error: 0201 ("0")
error_index: 0201 ("0")
varbinds: 3000
3055 0201 0330 1102 0419 cdd1 5c02 0300
ffe3 0401 0402 0103 0427 3025 0400 0201
0002 0100 040b 6379 6265 7277 6174 6368
3404 0c00 0000 0000 0000 0000 0000 0004
0030 1404 0004 00a0 0e02 044a d134 e302
0100 0201 0030
received encoded V3 message
3070 0201 0330 1102 0419 cdd1 5c02 0300
ffe3 0401 0002 0103 0426 3024 040b 8000
0009 030c 6d15 d7e4 0002 0100 0201 0004
0b63 7962 6572 7761 7463 6834 0400 0400
3030 040b 8000 0009 030c 6d15 d7e4 0004
00a8 1f02 044a d134 e302 0100 0201 0030
1130 0f06 0a2b 0601 0603 0f01 0104 0041
0170
v3_message: 3070
message_version: 0201 ("3")
headers: 3011
Integer: 0204 19cd d15c ("432918876")
Integer: 0203 00ff ("65507")
OctetString: 0401 ("\x00")
Integer: 0201 ("3")
security_params: 0426 3024 040b 8000 0009 030c 6d15 d7e4 0002 0100 0201 0004 0b63 7962 6572 7761 7463 6834 0400 0400 ("0$\x04\v\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00\x02\x01\x00\x02\x01\x00\x04\vcyberwatch4\x04\x00\x04\x00")
pdu: 3030
OctetString: 040b 8000 0009 030c 6d15 d7e4 ("\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00")
OctetString: 0400 ("")
ASN1Data: a81f
Integer: 0204 4ad1 34e3 ("1255224547")
Integer: 0201 ("0")
Integer: 0201 ("0")
Sequence: 3011
Sequence: 300f
ObjectId: 060a 2b06 0106 030f 0101 0400 ("1.3.6.1.6.3.15.1.1.4.0")
ASN1Data: 4101
auth_param: 0400 ("")
V3 message has been verified
received response PDU
pdu: 3030
engine_id: 040b 8000 0009 030c 6d15 d7e4 ("\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00")
context: 0400 ("")
request: a81f
request_id: 0204 4ad1 34e3 ("1255224547")
error: 0201 ("0")
error_index: 0201 ("0")
varbinds: 3011
Sequence: 300f
ObjectId: 060a 2b06 0106 030f 0101 0400 ("1.3.6.1.6.3.15.1.1.4.0")
Integer: 0201 ("112")
sending request...
pdu: 302d
engine_id: 040b 8000 0009 030c 6d15 d7e4 ("\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00")
context: 0400 ("")
request: a01c
request_id: 0204 0a9e d9ce ("178182606")
error: 0201 ("0")
error_index: 0201 ("0")
varbinds: 300e
Sequence: 300c
ObjectId: 0608 2b06 0102 0101 0500 ("1.3.6.1.2.1.1.5.0")
Null: 0500
encoding PDU in V3 message...
security_params: 3038
engine_id: 040b 8000 0009 030c 6d15 d7e4 ("\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00")
engine_boots: 0201 ("0")
engine_time: 0201 ("0")
username: 040b 6379 6265 7277 6174 6368 ("cyberwatch4")
auth_mask: 040c 0000 0000 0000 0000 0000 0000 ("\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000")
salt: 0408 0000 0000 0000 0000 ("\x00\x00\x00\x00\x00\x00\x00\x00")
v3_message: 3081
message_version: 0201 ("3")
headers: 3011
message_id: 0204 5641 70c6 ("1447129286")
max_message_size: 0203 00ff ("65507")
message_flags: 0401 ("\a")
security_model: 0201 ("3")
security_params: 043a 3038 040b 8000 0009 030c 6d15 d7e4 0002 0100 0201 0004 0b63 7962 6572 7761 7463 6834 040c 0000 0000 0000 0000 0000 0000 0408 0000 0000 0000 0000 ("08\x04\v\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00\x02\x01\x00\x02\x01\x00\x04\vcyberwatch4\x04\f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\b\x00\x00\x00\x00\x00\x00\x00\x00")
encrypted_pdu: 0438 3d17 b6a3 8dcd 7fc3 fe11 7153 ead2 476c 0674 45a1 96f1 7bf6 93d1 ec65 223a 3f9a fa14 ef90 0895 e432 6165 4850 ee8f 2d5d e200 0d1e 119f 50c3 ("=\x17\xB6\xA3\x8D\xCD\x7F\xC3\xFE\x11qS\xEA\xD2Gl\x06tE\xA1\x96\xF1{\xF6\x93\xD1\xECe\":?\x9A\xFA\x14\xEF\x90\b\x95\xE42aeHP\xEE\x8F-]\xE2\x00\r\x1E\x11\x9FP\xC3")
3081 8c02 0103 3011 0204 5641 70c6 0203
00ff e304 0107 0201 0304 3a30 3804 0b80
0000 0903 0c6d 15d7 e400 0201 0002 0100
040b 6379 6265 7277 6174 6368 3404 0c00
0000 0000 0000 0000 0000 0004 0800 0000
0000 0000 0004 383d 17b6 a38d cd7f c3fe
1171 53ea d247 6c06 7445 a196 f17b f693
d1ec 6522 3a3f 9afa 14ef 9008 95e4 3261
6548 50ee 8f2d 5de2 000d 1e11 9f50
signing V3 message...
auth: 040c 5845 8c60 0c0b da22 9ad4 157e ("XE\x8C`\f\v\xDA\"\x9A\xD4\x15~")
3081 8c02 0103 3011 0204 5641 70c6 0203
00ff e304 0107 0201 0304 3a30 3804 0b80
0000 0903 0c6d 15d7 e400 0201 0002 0100
040b 6379 6265 7277 6174 6368 3404 0c58
458c 600c 0bda 229a d415 7e04 0800 0000
0000 0000 0004 383d 17b6 a38d cd7f c3fe
1171 53ea d247 6c06 7445 a196 f17b f693
d1ec 6522 3a3f 9afa 14ef 9008 95e4 3261
6548 50ee 8f2d 5de2 000d 1e11 9f50
received encoded V3 message
307b 0201 0330 1102 0456 4170 c602 0300
ffe3 0401 0102 0103 0434 3032 040b 8000
0009 030c 6d15 d7e4 0002 0102 0203 0934
0904 0b63 7962 6572 7761 7463 6834 040c
1b1a 0bdc aa3d 5f0a fabd 4ed0 0400 302d
040b 8000 0009 030c 6d15 d7e4 0004 00a8
1c02 0100 0201 0002 0100 3011 300f 060a
2b06 0106 030f 0101 0200 4101
v3_message: 307b
message_version: 0201 ("3")
headers: 3011
Integer: 0204 5641 70c6 ("1447129286")
Integer: 0203 00ff ("65507")
OctetString: 0401 ("\x01")
Integer: 0201 ("3")
security_params: 0434 3032 040b 8000 0009 030c 6d15 d7e4 0002 0102 0203 0934 0904 0b63 7962 6572 7761 7463 6834 040c 1b1a 0bdc aa3d 5f0a fabd 4ed0 0400 ("02\x04\v\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00\x02\x01\x02\x02\x03\t4\t\x04\vcyberwatch4\x04\f\e\x1A\v\xDC\xAA=_\n\xFA\xBDN\xD0\x04\x00")
pdu: 302d
OctetString: 040b 8000 0009 030c 6d15 d7e4 ("\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00")
OctetString: 0400 ("")
ASN1Data: a81c
Integer: 0201 ("0")
Integer: 0201 ("0")
Integer: 0201 ("0")
Sequence: 3011
Sequence: 300f
ObjectId: 060a 2b06 0106 030f 0101 0200 ("1.3.6.1.6.3.15.1.1.2.0")
ASN1Data: 4101
auth_param: 040c 1b1a 0bdc aa3d 5f0a fabd 4ed0 ("\e\x1A\v\xDC\xAA=_\n\xFA\xBDN\xD0")
V3 message has been verified
Traceback (most recent call last):
12: from /usr/share/rvm/rubies/ruby-2.7.0/bin/irb:23:in `<main>'
11: from /usr/share/rvm/rubies/ruby-2.7.0/bin/irb:23:in `load'
10: from /usr/share/rvm/rubies/ruby-2.7.0/lib/ruby/gems/2.7.0/gems/irb-1.2.1/exe/irb:11:in `<top (required)>'
9: from (irb):2
8: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/client.rb:55:in `get'
7: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/client.rb:155:in `handle_retries'
6: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/client.rb:55:in `block in get'
5: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/v3_session.rb:27:in `send'
4: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/v3_session.rb:81:in `decode'
3: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/message.rb:56:in `decode'
2: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/security_parameters.rb:93:in `decode'
1: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/encryption/des.rb:32:in `decrypt'
NETSNMP::Error (invalid encrypted PDU received)
from ruby-netsnmp.
HoneyryderChuck
commented on September 23, 2024
thx for the output @jinxka . I'll try to work with it, and if I can't, I'll welcome that email with access to the node.
the first thing I notice is that you're actually having troubles with the decryption, not hmac verification. So this might be something different to what @tamiradari experienced.
from ruby-netsnmp.
HoneyryderChuck
commented on September 23, 2024
@jinxka @tamiradari can you test against this branch? Still have some CI issues to fix, but it should be good fo you to give it a try.
from ruby-netsnmp.
tamiradari
commented on September 23, 2024
We have some issues in the lab, so I don’t have access to this router.
I will test it when it will be solved.
Thanks,
Tamir.
from ruby-netsnmp.
jinxka
commented on September 23, 2024
@HoneyryderChuck , I tried with your new changes and got this:
a.get(oid: '1.3.6.1.2.1.1.5.0')
sending probe...
pdu: 3014
engine_id: 0400 ("")
context: 0400 ("")
request: a00e
request_id: 0204 42c0 0865 ("1119881317")
error: 0201 ("0")
error_index: 0201 ("0")
varbinds: 3000
encoding PDU in V3 message...
security_params: 3024
engine_id: 0400 ("")
engine_boots: 0201 ("0")
engine_time: 0201 ("0")
username: 040a 6379 6265 7277 6174 6368 ("cyberwatch")
auth_mask: 040c 0000 0000 0000 0000 0000 0000 ("\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000")
OctetString: 0400 ("")
v3_message: 3054
message_version: 0201 ("3")
headers: 3011
message_id: 0204 5d96 aaf4 ("1570155252")
max_message_size: 0203 00ff ("65507")
message_flags: 0401 ("\x04")
security_model: 0201 ("3")
security_params: 0426 3024 0400 0201 0002 0100 040a 6379 6265 7277 6174 6368 040c 0000 0000 0000 0000 0000 0000 0400 ("0$\x04\x00\x02\x01\x00\x02\x01\x00\x04\ncyberwatch\x04\f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00")
pdu: 3014
engine_id: 0400 ("")
context: 0400 ("")
request: a00e
request_id: 0204 42c0 0865 ("1119881317")
error: 0201 ("0")
error_index: 0201 ("0")
varbinds: 3000
3054 0201 0330 1102 045d 96aa f402 0300
ffe3 0401 0402 0103 0426 3024 0400 0201
0002 0100 040a 6379 6265 7277 6174 6368
040c 0000 0000 0000 0000 0000 0000 0400
3014 0400 0400 a00e 0204 42c0 0865 0201
0002 0100 3000
received encoded V3 message
3070 0201 0330 1102 045d 96aa f402 0300
ffe3 0401 0002 0103 0425 3023 040b 8000
0009 030c 6d15 d7e4 0002 0100 0201 0004
0a63 7962 6572 7761 7463 6804 0004 0030
3104 0b80 0000 0903 0c6d 15d7 e400 0400
a820 0204 42c0 0865 0201 0002 0100 3012
3010 060a 2b06 0106 030f 0101 0400 4102
00c0
v3_message: 3070
message_version: 0201 ("3")
headers: 3011
Integer: 0204 5d96 aaf4 ("1570155252")
Integer: 0203 00ff ("65507")
message_flags: 0401 ("\x00")
Integer: 0201 ("3")
security_params: 0425 3023 040b 8000 0009 030c 6d15 d7e4 0002 0100 0201 0004 0a63 7962 6572 7761 7463 6804 0004 ("0#\x04\v\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00\x02\x01\x00\x02\x01\x00\x04\ncyberwatch\x04\x00\x04\x00")
pdu: 3031
OctetString: 040b 8000 0009 030c 6d15 d7e4 ("\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00")
OctetString: 0400 ("")
ASN1Data: a820
Integer: 0204 42c0 0865 ("1119881317")
Integer: 0201 ("0")
Integer: 0201 ("0")
Sequence: 3012
Sequence: 3010
ObjectId: 060a 2b06 0106 030f 0101 0400 ("1.3.6.1.6.3.15.1.1.4.0")
ASN1Data: 4102 00c0
security_params: 3023
engine_id: 040b 8000 0009 030c 6d15 d7e4 ("\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00")
engine_boots: 0201 ("0")
engine_time: 0201 ("0")
username: 040a 6379 6265 7277 6174 6368 ("cyberwatch")
auth_param: 0400 ("")
priv_param: 0400 ("")
received response PDU
pdu: 3031
engine_id: 040b 8000 0009 030c 6d15 d7e4 ("\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00")
context: 0400 ("")
request: a820
request_id: 0204 42c0 0865 ("1119881317")
error: 0201 ("0")
error_index: 0201 ("0")
varbinds: 3012
Sequence: 3010
ObjectId: 060a 2b06 0106 030f 0101 0400 ("1.3.6.1.6.3.15.1.1.4.0")
Integer: 0202 00c0 ("192")
sending request...
pdu: 302d
engine_id: 040b 8000 0009 030c 6d15 d7e4 ("\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00")
context: 0400 ("")
request: a01c
request_id: 0204 7513 bf3c ("1964228412")
error: 0201 ("0")
error_index: 0201 ("0")
varbinds: 300e
Sequence: 300c
ObjectId: 0608 2b06 0102 0101 0500 ("1.3.6.1.2.1.1.5.0")
Null: 0500
encoding PDU in V3 message...
security_params: 3037
engine_id: 040b 8000 0009 030c 6d15 d7e4 ("\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00")
engine_boots: 0201 ("0")
engine_time: 0201 ("0")
username: 040a 6379 6265 7277 6174 6368 ("cyberwatch")
auth_mask: 040c 0000 0000 0000 0000 0000 0000 ("\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000")
salt: 0408 0000 0000 0000 0000 ("\x00\x00\x00\x00\x00\x00\x00\x00")
v3_message: 3081
message_version: 0201 ("3")
headers: 3011
message_id: 0204 3961 7d55 ("962690389")
max_message_size: 0203 00ff ("65507")
message_flags: 0401 ("\a")
security_model: 0201 ("3")
security_params: 0439 3037 040b 8000 0009 030c 6d15 d7e4 0002 0100 0201 0004 0a63 7962 6572 7761 7463 6804 0c00 0000 0000 0000 0000 0000 0004 0800 0000 0000 0000 ("07\x04\v\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00\x02\x01\x00\x02\x01\x00\x04\ncyberwatch\x04\f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\b\x00\x00\x00\x00\x00\x00\x00\x00")
encrypted_pdu: 0430 6ab1 9c97 8cd9 d3f1 8e96 ed15 6f68 10cc e0d3 6c6b 2d56 334d cccb c8a7 0c7f a149 8e35 a700 a2bd 2f69 97d7 1384 84e3 1cf1 ("j\xB1\x9C\x97\x8C\xD9\xD3\xF1\x8E\x96\xED\x15oh\x10\xCC\xE0\xD3lk-V3M\xCC\xCB\xC8\xA7\f\x7F\xA1I\x8E5\xA7\x00\xA2\xBD/i\x97\xD7\x13\x84\x84\xE3\x1C\xF1")
3081 8302 0103 3011 0204 3961 7d55 0203
00ff e304 0107 0201 0304 3930 3704 0b80
0000 0903 0c6d 15d7 e400 0201 0002 0100
040a 6379 6265 7277 6174 6368 040c 0000
0000 0000 0000 0000 0000 0408 0000 0000
0000 0000 0430 6ab1 9c97 8cd9 d3f1 8e96
ed15 6f68 10cc e0d3 6c6b 2d56 334d cccb
c8a7 0c7f a149 8e35 a700 a2bd 2f69 97d7
1384 84e3 1cf1
signing V3 message...
auth: 040c 6c5e ad55 e267 a307 748b 468f ("l^\xADU\xE2g\xA3\at\x8BF\x8F")
3081 8302 0103 3011 0204 3961 7d55 0203
00ff e304 0107 0201 0304 3930 3704 0b80
0000 0903 0c6d 15d7 e400 0201 0002 0100
040a 6379 6265 7277 6174 6368 040c 6c5e
ad55 e267 a307 748b 468f 0408 0000 0000
0000 0000 0430 6ab1 9c97 8cd9 d3f1 8e96
ed15 6f68 10cc e0d3 6c6b 2d56 334d cccb
c8a7 0c7f a149 8e35 a700 a2bd 2f69 97d7
1384 84e3 1cf1
received encoded V3 message
307b 0201 0330 1102 0439 617d 5502 0300
ffe3 0401 0102 0103 0433 3031 040b 8000
0009 030c 6d15 d7e4 0002 0102 0203 0aa5
5d04 0a63 7962 6572 7761 7463 6804 0cd9
7a72 0803 0e06 bc91 babb 4d04 0030 2e04
0b80 0000 0903 0c6d 15d7 e400 0400 a81d
0201 0002 0100 0201 0030 1230 1006 0a2b
0601 0603 0f01 0102 0041 0200
v3_message: 307b
message_version: 0201 ("3")
headers: 3011
Integer: 0204 3961 7d55 ("962690389")
Integer: 0203 00ff ("65507")
message_flags: 0401 ("\x01")
Integer: 0201 ("3")
security_params: 0433 3031 040b 8000 0009 030c 6d15 d7e4 0002 0102 0203 0aa5 5d04 0a63 7962 6572 7761 7463 6804 0cd9 7a72 0803 0e06 bc91 babb 4d04 ("01\x04\v\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00\x02\x01\x02\x02\x03\n\xA5]\x04\ncyberwatch\x04\f\xD9zr\b\x03\x0E\x06\xBC\x91\xBA\xBBM\x04\x00")
pdu: 302e
OctetString: 040b 8000 0009 030c 6d15 d7e4 ("\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00")
OctetString: 0400 ("")
ASN1Data: a81d
Integer: 0201 ("0")
Integer: 0201 ("0")
Integer: 0201 ("0")
Sequence: 3012
Sequence: 3010
ObjectId: 060a 2b06 0106 030f 0101 0200 ("1.3.6.1.6.3.15.1.1.2.0")
ASN1Data: 4102 008a
security_params: 3031
engine_id: 040b 8000 0009 030c 6d15 d7e4 ("\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00")
engine_boots: 0201 ("2")
engine_time: 0203 0aa5 ("697693")
username: 040a 6379 6265 7277 6174 6368 ("cyberwatch")
auth_param: 040c d97a 7208 030e 06bc 91ba bb4d ("\xD9zr\b\x03\x0E\x06\xBC\x91\xBA\xBBM")
priv_param: 0400 ("")
message has been verified
Traceback (most recent call last):
12: from /usr/share/rvm/rubies/ruby-2.7.0/bin/irb:23:in `<main>'
11: from /usr/share/rvm/rubies/ruby-2.7.0/bin/irb:23:in `load'
10: from /usr/share/rvm/rubies/ruby-2.7.0/lib/ruby/gems/2.7.0/gems/irb-1.2.1/exe/irb:11:in `<top (required)>'
9: from (irb):2
8: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/client.rb:55:in `get'
7: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/client.rb:155:in `handle_retries'
6: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/client.rb:55:in `block in get'
5: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/v3_session.rb:27:in `send'
4: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/v3_session.rb:81:in `decode'
3: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/message.rb:62:in `decode'
2: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/security_parameters.rb:98:in `decode'
1: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/encryption/aes.rb:30:in `decrypt'
NETSNMP::Error (invalid priv salt received)
It's looking better, but there seems to be an issue with the empty priv_param. As to why it does not send it, I need to look into it more.
We have some trouble to open the access on our cisco, but it will work eventually :).
from ruby-netsnmp.
HoneyryderChuck
commented on September 23, 2024
@jinxka can you pull and try again? I just realized there was a bug in the fix for this issue. It should work now.
FYI the issue is not the empty priv_param, i.e. it should not even try to decrypt in the first place.
from ruby-netsnmp.
jinxka
commented on September 23, 2024
@HoneyryderChuck I tried again after pulling and unfortunately I got the same error:
received encoded V3 message
307b 0201 0330 1102 0452 9ff2 5a02 0300
ffe3 0401 0102 0103 0433 3031 040b 8000
0009 030c 6d15 d7e4 0002 0102 0203 0aac
af04 0a63 7962 6572 7761 7463 6804 0cf3
b009 a4c7 995f e767 62d4 2304 0030 2e04
0b80 0000 0903 0c6d 15d7 e400 0400 a81d
0201 0002 0100 0201 0030 1230 1006 0a2b
0601 0603 0f01 0102 0041 0200
v3_message: 307b
message_version: 0201 ("3")
headers: 3011
Integer: 0204 529f f25a ("1386213978")
Integer: 0203 00ff ("65507")
message_flags: 0401 ("\x01")
Integer: 0201 ("3")
security_params: 0433 3031 040b 8000 0009 030c 6d15 d7e4 0002 0102 0203 0aac af04 0a63 7962 6572 7761 7463 6804 0cf3 b009 a4c7 995f e767 62d4 2304 ("01\x04\v\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00\x02\x01\x02\x02\x03\n\xAC\xAF\x04\ncyberwatch\x04\f\xF3\xB0\t\xA4\xC7\x99_\xE7gb\xD4#\x04\x00")
pdu: 302e
OctetString: 040b 8000 0009 030c 6d15 d7e4 ("\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00")
OctetString: 0400 ("")
ASN1Data: a81d
Integer: 0201 ("0")
Integer: 0201 ("0")
Integer: 0201 ("0")
Sequence: 3012
Sequence: 3010
ObjectId: 060a 2b06 0106 030f 0101 0200 ("1.3.6.1.6.3.15.1.1.2.0")
ASN1Data: 4102 008d
security_params: 3031
engine_id: 040b 8000 0009 030c 6d15 d7e4 ("\x80\x00\x00\t\x03\fm\x15\xD7\xE4\x00")
engine_boots: 0201 ("2")
engine_time: 0203 0aac ("699567")
username: 040a 6379 6265 7277 6174 6368 ("cyberwatch")
auth_param: 040c f3b0 09a4 c799 5fe7 6762 d423 ("\xF3\xB0\t\xA4\xC7\x99_\xE7gb\xD4#")
priv_param: 0400 ("")
message has been verified
Traceback (most recent call last):
12: from /usr/share/rvm/rubies/ruby-2.7.0/bin/irb:23:in `<main>'
11: from /usr/share/rvm/rubies/ruby-2.7.0/bin/irb:23:in `load'
10: from /usr/share/rvm/rubies/ruby-2.7.0/lib/ruby/gems/2.7.0/gems/irb-1.2.1/exe/irb:11:in `<top (required)>'
9: from (irb):6
8: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/client.rb:55:in `get'
7: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/client.rb:155:in `handle_retries'
6: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/client.rb:55:in `block in get'
5: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/v3_session.rb:27:in `send'
4: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/v3_session.rb:81:in `decode'
3: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/message.rb:62:in `decode'
2: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/security_parameters.rb:98:in `decode'
1: from /home/benjamin/Documents/git/ruby-netsnmp/lib/netsnmp/encryption/aes.rb:30:in `decrypt'
NETSNMP::Error (invalid priv salt received)
from ruby-netsnmp.
HoneyryderChuck
commented on September 23, 2024
@jinxka just committed a potential fix. However, maybe to spare you from constantly hitting against the wall, I'll ask you to troubleshoot it yourself.
In order to do so, I'll ask you to open the project on your side and inspect what's happening.
The commit/line with the fix is: 340da59#diff-5fc6c95fdba643193b6d2e0e980c33d716231a660b5dea6b2b76d759098b08bdR38
That security_level variable must be 0 for the probe response, and 1 for the get response, after unpacking. If it's not, it's a bug with the unpack call above. If so, I'll ask you to print the string being unpacked here.
I think that I committed the proper fix this time, but then again, I also did 3 messages ago. Sorry for the back and forth.
from ruby-netsnmp.
fwininger
commented on September 23, 2024
Thank you very much @HoneyryderChuck for your time. I confirm you that we are able to give you an access one of your test environment tomorow morning.
from ruby-netsnmp.
fwininger
commented on September 23, 2024
@HoneyryderChuck I send you the SNMP credentials to acces the Cisco.
from ruby-netsnmp.
HoneyryderChuck
commented on September 23, 2024
@fwininger I'm getting a timeout.
PING X.X.X.X (X.X.X.X): 56 data bytes
Request timeout for icmp_seq 0
Request timeout for icmp_seq 1
Request timeout for icmp_seq 2
Request timeout for icmp_seq 3
Request timeout for icmp_seq 4
from ruby-netsnmp.
jinxka
commented on September 23, 2024
@HoneyryderChuck We are working on it and coming back to you ASAP.
from ruby-netsnmp.
fwininger
commented on September 23, 2024
The ICMP is blocked by our internet provider.
We also found an issue with the UDP packet on the port 161 that close the connection after the first attempt. This issue is solved.
The snmpget command I have send you should work now :)
from ruby-netsnmp.
fwininger
commented on September 23, 2024
Thank you very much 🥇
from ruby-netsnmp.
Related Issues (20)
- Counter32 and Counter64 Values Issue HOT 5
- Counter64 OID Values Are Returned as nil HOT 6
- Certain gauge / counter32 values are being encoded incorrectly HOT 11
- HMAC-SHA-2 Authentication Protocols in the User-based Security Model (USM) for SNMPv3 HOT 2
- SNMPSet two different OIDs in one request command? HOT 5
- MIB parser
- Different encoding of results HOT 2
- Bug AES decrypt when salt is empty HOT 1
- Cannot load MIB file HOT 10
- The gem does not recognize authentication failures HOT 2
- Occasional "Decryption error" with SNMPv3 HOT 14
- Not working with v1 (maybe) HOT 15
- uninitialized constant Socket::MSG_NOSIGNAL HOT 4
- passkey calculation into c extension
- The gem does not recognize a missing OID HOT 7
- SNMPv3 not working with APC UPS HOT 11
- V3 cannot parse TROPIC-GLOBAL-MIB HOT 2
- Cisco Mibs Brake when using mib names HOT 19
- SNMPV3. Failing to load some legacy MIBs. HOT 6
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ruby-netsnmp.