|
|
1.1 ! root 1: .TH SNMPD 8C "14 Sep 1989" ! 2: .\" $Header: /f/osi/snmp/RCS/snmpd.8c,v 7.14 90/06/23 01:33:10 mrose Exp $ ! 3: .\" ! 4: .\" Contributed by NYSERNet Inc. This work was partially supported by the ! 5: .\" U.S. Defense Advanced Research Projects Agency and the Rome Air Development ! 6: .\" Center of the U.S. Air Force Systems Command under contract number ! 7: .\" F30602-88-C-0016. ! 8: .\" ! 9: .\" ! 10: .\" $Log: snmpd.8c,v $ ! 11: .\" Revision 7.14 90/06/23 01:33:10 mrose ! 12: .\" proxy again ! 13: .\" ! 14: .\" Revision 7.13 90/06/21 21:27:03 mrose ! 15: .\" proxy ! 16: .\" ! 17: .\" Revision 7.12 90/06/20 23:52:55 mrose ! 18: .\" again ! 19: .\" ! 20: .\" Revision 7.11 90/06/20 21:38:29 mrose ! 21: .\" update ! 22: .\" ! 23: .\" Revision 7.10 90/06/13 17:58:41 mrose ! 24: .\" defaultView ! 25: .\" ! 26: .\" Revision 7.9 90/06/12 05:19:02 mrose ! 27: .\" again ! 28: .\" ! 29: .\" Revision 7.8 90/06/12 02:06:20 mrose ! 30: .\" views ... ! 31: .\" ! 32: .\" Revision 7.7 90/06/12 02:05:32 mrose ! 33: .\" views ... ! 34: .\" ! 35: .\" Revision 7.6 90/05/23 18:08:55 mrose ! 36: .\" 1158 ! 37: .\" ! 38: .\" Revision 7.5 90/05/13 17:54:37 mrose ! 39: .\" views again ! 40: .\" ! 41: .\" Revision 7.4 90/05/13 16:08:10 mrose ! 42: .\" again ! 43: .\" ! 44: .\" Revision 7.3 90/05/13 15:55:55 mrose ! 45: .\" update ! 46: .\" ! 47: .\" Revision 7.2 90/02/19 19:17:01 mrose ! 48: .\" again ! 49: .\" ! 50: .\" Revision 7.1 90/01/11 18:34:30 mrose ! 51: .\" real-sync ! 52: .\" ! 53: .\" Revision 7.0 89/11/23 22:23:25 mrose ! 54: .\" Release 6.0 ! 55: .\" ! 56: .SH NAME ! 57: snmpd \- minimal SNMP agent for BSD UNIX ! 58: .SH SYNOPSIS ! 59: .in +.5i ! 60: .ti -.5i ! 61: .B \*(SDsnmpd ! 62: \%[-d] ! 63: \%[\-t] \%[\-x] \%[\-z] ! 64: \%[-p portno] ! 65: \%[\-a x121address] \%[\-i\ pid] ! 66: \%[-r] \%[-s] ! 67: .in -.5i ! 68: (under /etc/rc.local) ! 69: .SH DESCRIPTION ! 70: The \fIsnmpd\fR server acts as a management agent, ! 71: implementing the Simple Network Management Protocol for Berkeley UNIX systems. ! 72: Upon receipt of a message, ! 73: it \*(lqauthenticates\*(rq the request, ! 74: attempts the operation, ! 75: and then returns a response. ! 76: .PP ! 77: The managed objects manipulated by \fIsnmpd\fR are defined in the file ! 78: \fBsnmpd.defs\fR, ! 79: kept in the system administrator's area. ! 80: These objects conform to the Internet-standard ! 81: \fIManagement Information Base\fR (commonly referred to as MIB-I), ! 82: which is defined in RFC 1156. ! 83: The rules used for naming and describing objects are taken from the ! 84: Internet-standard ! 85: \fIStructure of Management Information\fR (SMI), ! 86: which is defined in RFC 1155. ! 87: .PP ! 88: At present, ! 89: \fIsnmpd\fR permits only a read-only SNMP access mode. ! 90: This restriction may be lifted in the future. ! 91: .PP ! 92: Most objects are realized via reading \fB/dev/kmem\fR. ! 93: There are some exceptions, ! 94: which can be set via a configuration file, ! 95: which is read once, ! 96: when the daemon starts. ! 97: .SH TRANSPORTS ! 98: For a UDP\-based network service, ! 99: the server listens on port 161 for SNMP messages. ! 100: The `\-p' option overrides the default UDP port. ! 101: .PP ! 102: For an X.25\-based network service, ! 103: the server implements the transport class 0 protocol, ! 104: decodes the connection request packet, ! 105: and execs the appropriate program to enter the protocol and provide the ! 106: service. ! 107: The `\-a' switch is used to specify the X.121 address of the local host ! 108: \(em this overrides the entry in the \fBisotailor\fP file. ! 109: In addition, ! 110: the `\-i' switch is used to specify the protocol ID to listen on ! 111: \(em the default is 03018200. ! 112: Note that on most X.25 implementations, ! 113: if the local X.121 address is not present in the \fBisotailor\fR file, ! 114: then the `-a' switch must be used in order for the server to ! 115: receive incoming calls. ! 116: .PP ! 117: For a TP4\-based transport service, ! 118: the server simply listens to any incoming connections for selector ! 119: \*(lqsnmp\*(rq. ! 120: .PP ! 121: By default, ! 122: all network services are enabled ! 123: (if defined in the configuration). ! 124: The `\-t' option specifies TCP\-only operation, ! 125: the `\-x' option specifies X.25\-only operation, ! 126: and the `\-z' option specifies TP4\-only operation. ! 127: .SH SMUX ! 128: The agent supports the SNMP Multiplexing (SMUX) protocol. ! 129: To disable this, ! 130: use the `\-s' option. ! 131: .SH CONFIGURATION ! 132: The \fBsnmpd.rc\fR file, ! 133: which is kept in the system administrator's area, ! 134: contains customization commands. ! 135: This file must be owned by root unless the `-r' option is given. ! 136: At present, ! 137: the directives are: ! 138: .TP ! 139: .B community\fR\0name\0address\0access\0view ! 140: defines an SNMP community called `name' with the indicated level of `access'. ! 141: The `address' token is either a hostname, an IP-address, or a ! 142: network address (using Kille's string syntax). ! 143: If present and a value other than 0.0.0.0 is used, ! 144: then incoming messages claiming to belong to the named community must ! 145: come from this address. ! 146: The `access' token, ! 147: if present, ! 148: is one of \*(lqreadOnly\*(rq, \*(lqreadWrite\*(rq, or \*(lqnone\*(rq, ! 149: and defaults to \*(lqreadOnly\*(rq. ! 150: The `view' token, ! 151: if present, ! 152: is an object identifier, ! 153: which names the corresponding view of MIB objects that this community ! 154: may access; ! 155: otherwise, ! 156: it defaults to a view containing all variables known to the agent. ! 157: .TP ! 158: .B view\fR\0name\0subtree\0... ! 159: defines a collection of manageable objects ! 160: with the given object identifier as its name. ! 161: All variables scoped by the `subtree' tokens, ! 162: each an object identifier, ! 163: given in the directive are placed in the view. ! 164: If no subtress are listed, ! 165: the view contains all variables known to the agent. ! 166: .TP ! 167: .B proxy\fR\0name\0domain\0address\0community ! 168: defines an SNMP proxy relationship, ! 169: in terms of a view called `name'. ! 170: Management requests for this view will be encapsulated via the access ! 171: method for `domain' and sent to the named address/community. ! 172: At present, ! 173: only the domain `rfc1157' (SNMP over UDP) is supported, ! 174: and the format of the `address' token is identical to that used by the ! 175: \fBcommunity\fR directive. ! 176: .TP ! 177: .B logging\fR\0ava\0... ! 178: sets the logging parameters accordingly. ! 179: The one or more `ava' tokens are of the form \*(lqattribute=value\*(rq. ! 180: The attributes are: ! 181: \fIfile\fR, ! 182: which is the filename for the log, ! 183: this is interpreted relative to the ISODE logging area, ! 184: unless the value starts with a slash; ! 185: \fIsize\fR, ! 186: which takes an integer value describing the maximum file size ! 187: (in KBytes) that the log should be allowed to grow; ! 188: \fIslevel\fR, ! 189: which takes a string value indicating which events should be logged ! 190: (one of \fInone\fR, \fIfatal\fR, \fIexceptions\fR, \fInotice\fR, \fItrace\fR, ! 191: \fIpdus\fR, \fIdebug\fR, or \fIall\fR); ! 192: \fIdlevel\fR, ! 193: which says which events should not be logged; ! 194: \fIsflags\fR, ! 195: which takes a string value indicating logging options should be enabled ! 196: (one of \fIclose\fR (to close the log after each entry), ! 197: \fIcreate\fR (to create the log if it does not already exist), ! 198: \fIzero\fR (to reset the log if the size is exceeded), ! 199: and \fItty\fR (to log events to the user's terminal in addition to the file)); ! 200: and, ! 201: \fIdflags\fR, ! 202: which says which logging options should be disabled. ! 203: .TP ! 204: .B trap\fR\0name\0address\0view ! 205: defines a trap sink for the SNMP community called `name', ! 206: on the indicated address, ! 207: which is either a hostname, an IP-address, or a ! 208: network address (using Kille's string syntax). ! 209: Note that at present, ! 210: traps sinks must be reachable via UDP ! 211: (the network address must be an IP-address). ! 212: By default, ! 213: a view is not named for the trap sink. ! 214: .TP ! 215: .B variable\fR\0name\0value ! 216: sets the named variable to the indicated value. ! 217: At present, ! 218: these variables may be set: ! 219: \fIsysDescr\fR, ! 220: which takes a string value describing the management agent; ! 221: \fIsysObjectID\fR, ! 222: which takes an OBJECT IDENTIFIER value containing similar information; ! 223: \fIsysContact\fR, ! 224: which takes a string value describing the person responsible for the ! 225: node; ! 226: \fIsysName\fR, ! 227: which takes a string value giving an administratively assigned name ! 228: for the node; ! 229: \fIsysLocation\fR, ! 230: which takes a string value describing the location of the node; ! 231: and, ! 232: \fIsysServices\fR, ! 233: which takes an integer describing the services offered by the node. ! 234: See RFC 1156 for a more thorough explanation of these objects. ! 235: (The last four are defined in MIB-II, RFC 1158, ! 236: the follow-on to RFC 1156.) ! 237: .TP ! 238: .B variable\0snmpEnableAuthTraps\fR\0[ enabled | disabled ] ! 239: enables (or disables) the generation of authenticationFailure traps. ! 240: .TP ! 241: .B variable\0interface\fR\0name\0ava\0... ! 242: sets attributes for the named interface. ! 243: The `name' token is an interface name as reported by \*(lqnetstat\0-i\*(rq. ! 244: The one or more `ava' tokens are of the form \*(lqattribute=value\*(rq. ! 245: At present, ! 246: only three attributes may be set for each interface: ! 247: \fIifType\fR, ! 248: which takes an integer value describing the kind of interface; ! 249: \fIifSpeed\fR, ! 250: which takes an integer value describing the speed of the interface; ! 251: and, ! 252: \fIifAdminStatus\fR, ! 253: which takes an integer value describing the adminstrative state of the ! 254: interface. ! 255: See RFC 1156 for a more thorough explanation of these objects. ! 256: .SH "DEBUG OPERATION" ! 257: If \fIsnmpd\fR is started interactively, ! 258: or if the `\-d' switch is given, ! 259: then debug mode is entered. ! 260: In this case, ! 261: all logging activity is displayed on the user's terminal. ! 262: In addition, ! 263: the logging information is more verbose. ! 264: .SH FILES ! 265: .nf ! 266: .ta \w'\*(LDsnmpd.log 'u ! 267: \*(EDsnmpd.defs MIB definitions ! 268: \*(EDsnmpd.rc configuration file ! 269: \*(LDsnmpd.log log file ! 270: /etc/snmpd.pid daemon PID file ! 271: .re ! 272: .fi ! 273: .SH "NOTE WELL" ! 274: The names of the objects in \fBsnmpd.defs\fR are case sensitive. ! 275: This was necessary to improve the efficiency of the hashing algorithm ! 276: used for object lookup. ! 277: .SH "SEE ALSO" ! 278: RFCs 1155, 1156, and 1157. ! 279: .PP ! 280: S.E.\0Kille, ! 281: \fIA string encoding of Presentation Address\fR, ! 282: Research Note RN/89/14, ! 283: Department of Computer Science, ! 284: University College London, ! 285: (February, 1989). ! 286: .SH AUTHOR ! 287: Marshall T. Rose, ! 288: NYSERNet Inc. ! 289: This work was partially supported by the ! 290: U.S. Defense Advanced Research Projects Agency and the Rome Air Development ! 291: Center of the U.S. Air Force Systems Command under contract number ! 292: F30602-88-C-0016. ! 293: .PP ! 294: Although this package is distributed with the ISODE, ! 295: it is not an OSI program, per se. ! 296: Inasmuch as the continued survival of the Internet hinges on all nodes ! 297: becoming network manageable, ! 298: this package was developed using the ISODE and is being freely ! 299: distributed with releases of Berkeley UNIX. ! 300: .PP ! 301: It must be stressed that this package is not a complete network management ! 302: system. ! 303: In particular, ! 304: whilst \fIsnmpd\fR provides a minimal agent functionality, ! 305: there are no Network Operation Center (NOC) tools--\fIsnmpi\fR is a ! 306: debugging aid only.
This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.