Security Incidents mailing list archives

More Solaris snmpdx syslog data


From: Tina Bird <tbird () counterpane com>
Date: Fri, 15 Feb 2002 15:07:37 -0800

In testing the PROTOS SNMP test suite against snmpdx on Solaris 2.7,
Counterpane has discovered that a variety of syslog messages are
created.  Here's a summary of our results.  The raw data will be
available from the Log Analysis Web site at

http://www.counterpane.com/log-analysis.html

within a day or two; in the meantime, please contact me directly
and I'll email it to you.

tbird

-----Original Message-----
From: Mike Batchelder 
Sent: Friday, February 15, 2002 12:31 PM
To: Tina Bird

In their original form, each of these messages is preceded by an "snmpdx:"
service field. Some of the numbers in ()'s are just byte counts or other 
stuff taken from the input, not specific error codes.  Essentially, these 
are examples of many occurrences of each type of message, and the 
occurrences have some different #'s depending on the test case.  
Some stay the same.

agent snmpd not responding
SNMP error (UNKNOWN! (16777215), 0) sent back to test.counterpane.com.65314
SNMP error (badValue(3), 0) sent back to test.counterpane.com.33141
SNMP error (genErr(5), 16533) sent back to test.counterpane.com.33306
SNMP error (readOnly(4), 0) sent back to test.counterpane.com.33212
SNMP error (tooBig(1), 0) sent back to test.counterpane.com.32999
error while receiving a pdu from test.counterpane.com.60271: The message has a wrong version (65793)
error while sending a pdu back to test.counterpane.com.33363: The buffer is too small
error while sending a pdu to localhost.32789: The buffer is too small
no variable in PDU received from test.counterpane.com.33570
session_open() failed for a pdu received from test.counterpane.com.33576
session_send_request() failed
unable to handle SNMP request with more than 32 variables
Agent snmpd appeared dead but responded to ping


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: