Category Archives: Ubuntu

Create SNMPv3 User

$ sudo net-snmp-config --create-snmpv3-user -ro -X DES -A MD5 -a "<PASSWORD>" -x "<PASSWORD>" <USERNAME>
adding the following line to /var/lib/snmp/snmpd.conf:
   createUser <USERNAME> MD5 "<PASSWORD>" DES <PASSWORD>
adding the following line to /usr/share/snmp/snmpd.conf:
   rouser <USERNAME>

SNMP Konfigurieren

SNMPv3

README.snmpv3

Timeout Error

# snmpget -v 2c -c public localhost sysUpTime.0
Timeout: No Response from localhost.

# snmpget -v 3 -u USER -A PASSWORD localhost sysUpTime.0
snmpget: Timeout (Sub-id not found: (top) -> sysUpTime)
# snmpd -p /var/run/net_snmpd.pid -f -Lo -D udpbase:recv
registered debug token udpbase:recv, 1
/usr/local/share/snmp/snmpd.conf: line 18: Warning: Unknown token: agendAddress.
Turning on AgentX master support.
NET-SNMP version 5.7.2
udpbase:recv: got source addr: 127.0.0.1
Connection from UDP: [127.0.0.1]:43137->[127.0.0.1]:161
snmplib/transports/snmpUDPDomain.c
netsnmp_transport *netsnmp_udp_transport(struct sockaddr_in *addr, int local)
{
    netsnmp_transport *t = NULL;

    t->domain = netsnmpUDPDomain;
    t->domain_length = netsnmpUDPDomain_len;
    t->msgMaxSize = 0xffff - 8 - 20;
    t->f_recv     = netsnmp_udpbase_recv;
    t->f_send     = netsnmp_udpbase_send;
    t->f_close    = netsnmp_socketbase_close;
    t->f_accept   = NULL;
    t->f_fmtaddr  = netsnmp_udp_fmtaddr;
}

snmplib/transports/snmpUDPBaseDomain.c
int netsnmp_udpbase_recv(netsnmp_transport *t, void *buf, int size, void **opaque, int *olength)

snmplib/transports/snmpUDPDomain.c
int netsnmp_udp_recvfrom(int s, void *buf, int len, struct sockaddr *from, socklen_t *fromlen, struct sockaddr *dstip, socklen_t *dstlen, int *if_index)

snmplib/transports/snmpUDPIPv4BaseDomain.c
int netsnmp_udpipv4_recvfrom(int s, void *buf, int len, struct sockaddr *from, socklen_t *fromlen, struct sockaddr *dstip, socklen_t *dstlen, int *if_index)

snmplib/transports/snmpUDPBaseDomain.c
int netsnmp_udpbase_recvfrom(int s, void *buf, int len, struct sockaddr *from, socklen_t *fromlen, struct sockaddr *dstip, socklen_t *dstlen, int *if_index)
# cat /etc/pf.conf
[...]
set skip on lo
[...]

ubuntuusers.de
Wolfgang Reutz’s Blog
Walter Munguía M.

Ubuntu Networking

Dynamic IP Address Assignment (DHCP Client)

auto eth0
iface eth0 inet dhcp

Static IP Address Assignment

auto eth0
iface eth0 inet static
address 10.0.0.100
netmask 255.255.255.0
gateway 10.0.0.1

Restart

sudo ifup eth0
sudo ifdown eth0

Wireshark ohne root starten

sudo chgrp wireshark /usr/bin/dumpcap
sudo chmod 754 /usr/bin/dumpcap
sudo setcap cap_net_raw,cap_net_admin=eip /usr/bin/dumpcap

Reihenfolge ist zubedingt zu beachten!

oder

Q)
Keine Interfaces sichtbar

A)

sudo dpkg-reconfigure wireshark-common 
sudo usermod -a -G wireshark $USER
http://ask.wireshark.org/questions/7523/ubuntu-machine-no-interfaces-listed

Quelle:
Platform-Specific information about capture privileges
Sniffing with Wireshark as a Non-Root User