Linux + snmp + how to verify snmp.conf

linuxredhatsnmp

in my redhat linux machine I have the follwing snmp configuration

more /etc/snmp/snmpd.conf
#dlmod cmaX /usr/lib64/libcmaX64.so
rocommunity ttt 127.0.0.1

syscontact plilunixadm@pl.co.il

rocommunity ttt darapp01.pl.corp
rocommunity ttt  darapp02.pl.corp


syslocation UNKNOWN
trapcommunity ttt
trapsink  plice01.il.pl.corp ttt

so my target is to verify that snmp.conf configured right and snmp basic sanity as well

I just googled to see what command can check the current snmp configuration
and I find this:

  snmpwalk -v 2c -c   ttt -O e 127.0.0.1|more
  SNMPv2-MIB::sysDescr.0 = STRING: Linux machine01  
  DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (560475) 1:33:24.75
  SNMPv2-MIB::sysContact.0 = STRING: unixadm@pl.co.il
  SNMPv2-MIB::sysName.0 = STRING: machine01 
  SNMPv2-MIB::sysLocation.0 = STRING: UNKNOWN

.
.
.

there are a lot of details from the command output

but not understand what actually need to capture from the output in order to be sure that my snmp.conf is OK

second question – what is the string rshedona from the file?

Best Answer

your snmpd.conf works because snmpwalk return a result.

The string rshedona is the name of the community you have chose.

rocommunity rshedona 127.0.0.1
...
rocommunity rshedona darapp01.pl.corp
rocommunity rshedona  darapp02.pl.corp

and is the string you have writen in the command snmpwalk :

  snmpwalk -v 2c -c   rshedona -O e 127.0.0.1|more

-v is the version of snmp -c the community -O the output options By default, snmpwalk return the result of the system MIB.

Related Solutions

Linux Bash – How to Sort du -h Output by Size

As of GNU coreutils 7.5 released in August 2009, sort allows a -h parameter, which allows numeric suffixes of the kind produced by du -h:

du -hs * | sort -h

If you are using a sort that does not support -h, you can install GNU Coreutils. E.g. on an older Mac OS X:

brew install coreutils
du -hs * | gsort -h

From sort manual:

-h, --human-numeric-sort compare human readable numbers (e.g., 2K 1G)

Linux – How to run a server on port 80 as a normal user on Linux

Short answer: you can't. Ports below 1024 can be opened only by root. As per comment - well, you can, using CAP_NET_BIND_SERVICE, but that approach, applied to java bin will make any java program to be run with this setting, which is undesirable, if not a security risk.

The long answer: you can redirect connections on port 80 to some other port you can open as normal user.

Run as root:

# iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080

As loopback devices (like localhost) do not use the prerouting rules, if you need to use localhost, etc., add this rule as well (thanks @Francesco):

# iptables -t nat -I OUTPUT -p tcp -d 127.0.0.1 --dport 80 -j REDIRECT --to-ports 8080

NOTE: The above solution is not well suited for multi-user systems, as any user can open port 8080 (or any other high port you decide to use), thus intercepting the traffic. (Credits to CesarB).

EDIT: as per comment question - to delete the above rule:

# iptables -t nat --line-numbers -n -L

This will output something like:

Chain PREROUTING (policy ACCEPT)
num  target     prot opt source               destination         
1    REDIRECT   tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:8080 redir ports 8088
2    REDIRECT   tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:80 redir ports 8080

The rule you are interested in is nr. 2, so to delete it:

# iptables -t nat -D PREROUTING 2

Best Answer

Related Solutions

Linux Bash – How to Sort du -h Output by Size

Linux – How to run a server on port 80 as a normal user on Linux

Related Topic