Re: snmp decoding ...ubuntu smi issue ?... different then on windows XP ...?

[Andrew Hood <ajhood () fl net au>]

Before we get any deeper I don't run Ubuntu. Slackware rules.

Sandor, Todd (Todd) wrote:

> What version of libsmi does Ubuntu have? The current one is 0.4.8, but I
> tend to use the one in Subversion.
>
> Todd> According to "About Wireshark", it using SMI 0.4.8 ...

Good start.

> Are your MIBs ones that come with Ubuntu, some other package, or the
> ones from libsmi? libsmi's parser is extremely strict and many other
> sources have less than perfect (to be polite) syntax and semantics.
> Frank and Juergen fix the MIBs they include in libsmi so they are correct.
>
> Todd> Not sure exactly, possibly with Ubuntu, how do I determine this? 
> Todd> Notes:
> * there are some mibs in directories /var/lib/mibs/iana and /var/lib/mibs/ietf   File /etc/smi.conf "path" points to 
> /usr/share/mibs/ which have symbolic links to the ones in /var/lib/mibs ...
> * I did purge of the smi library(s), but these mibs were left in place " sudo apt-get purge libsmi2-common 
> libsmi2-dev libsmi2ldbl", so ... (technically they should be removed if they were part of this install, no?), so this 
> might be part of Ubuntu or ?
> * I removed my wireshark configuration for SMI Path and SMI modules I added, but still get error " Stopped processing 
> module RFC1213-MIB due to error(s) to prevent potential crash in libsmi." ...
> * I then moved /var/lib/mibs/ietf/RFC1213-MIB somewhere else, then started wireshark again and got the same 
> RFC1212-MIB, thus Wireshark must not be using this directory (/etc/smi.conf path points to them via sym-links in 
> /usr/share/mibs/...
>
> Todd> If Frank/Juergen fixed the mibs, where are the put when you install the libsmi?

Left to it's own devices, the libsmi build puts them in
/usr/local/share/mibs/{iana,ietf,irtf,site,tubs} but where Ubuntu choose
to put them is their business. If Wireshark is still finding those two
MIB files, then there must be other copies somewhere. Does Ubuntu's
Wireshark have any MIBs included?

> If you want to include other MIBs you really have to make sure you have
> all the IMPORTS, and that smilint accepts all the MIBs as valid with the
> "-l 3" option at a minimum. "-l 4" would be better.
>
> Todd> If can get base to work, I look into using private mibs and work through smilint, etc., I'm a newbie and part 
> of my issue are finger issues right now...

Andrew
-- 
There's no point in being grown up if you can't be childish sometimes.
                -- Dr. Who
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe