summaryrefslogtreecommitdiffstats
path: root/contrib/bsnmp
Commit message (Collapse)AuthorAgeFilesLines
* MFC r276319:ngie2015-01-051-2/+2
| | | | | | | Fix the function signatures when MK_CRYPT == no for snmp_get_local_keys and snmp_passwd_to_keys Reported by: Beeblebrox <zaphod@berentweb.com>
* MFC r260636:delphij2014-01-141-0/+5
| | | | | | | | | Fix bsnmpd remote denial of service vulnerability. Reported by: dinoex Submitted by: harti Security: FreeBSD-SA-14:01.bsnmpd Security: CVE-2014-1452
* Register OID for HAST module.trociny2013-05-081-0/+1
| | | | MFC after: 2 weeks
* Restore the ipNetToMedia MIB, that was broken with new ARP commitglebius2013-04-251-0/+45
| | | | | | in the r186119. Submitted by: Konstantin Kukushkin <dark rambler-co.ru>
* Clean some 'svn:executable' properties in the tree.pfg2013-01-2610-0/+0
| | | | | Submitted by: Christoph Mallon MFC after: 3 days
* Looks like support.h is really not needed here.glebius2012-10-181-1/+0
|
* put another bandaid on the build until i figure out bsnmp headersemax2012-10-181-1/+1
|
* fix buildemax2012-10-171-0/+1
| | | | MFC after: 1 week
* Re-do r240271:glebius2012-09-202-8/+17
| | | | | | | | | | | - Set IP_RECVDSTADDR sockopt on the socket only in case if it is INADDR_ANY bound. - Supply IP_SENDSRCADDR control message only if we did receive IP_RECVDSTADDR control message. This fixes operation of snmpd bound to a specific local IP address. PR: bin/171279
* For UDP transport set IP_RECVDSTADDR sockopt on the socket, and provideglebius2012-09-092-6/+41
| | | | | | | | IP_SENDSRCADDR control with datagram message we reply with. This makes bsnmpd reply from exactly same address that request was sent to, thus successfully bypassing stateful firewalls or other kinds of strict checking. PR: bin/171279
* The first part of check_priv() function, that attempts to obtain credsglebius2012-09-082-43/+40
| | | | | | | | | | | | | | | | | | | | | | | | | from the control message, actually never worked. This means check_priv() didn't work for local dgram sockets. The SCM_CREDS control messages is received only in two cases: 1) If we did setsockopt(LOCAL_CREDS) on our socket, and in this case the message is struct sockcred. 2) If sender did supplied SCM_CREDS control message in his sendmsg() syscall. In this case the message is struct cmsgcred. We can't rely on 2), so we will use 1) for dgram sockets. For stream sockets it is more reliable to obtain accept-time credentials, since SCM_CREDS control message is attached only on first read. Thus: o Do setsockopt(LOCAL_CREDS) on local dgram sockets. o Split check_priv() into check_priv_stream() and check_priv_dgram(), and call them from recv_stream() and recv_dgram() respectively. o Don't provide space for SCM_CREDS control message in recv_stream(). o Provide space for SCM_CREDS control message in recv_dgram(), but there is no need to initialize anything in it. o In recv_dgram() do not blindly expect that first message is SCM_CREDS, instead use correct search cycle through control messages.
* Fully initialize the stack-allocated "struct sockaddr_in sa" structure.kevlo2012-09-071-1/+2
|
* Remove end of line whitespace.joel2012-06-172-4/+4
|
* Minor mdoc fixes.joel2012-06-175-7/+4
|
* Count both IPv4 and IPv6 TCP connections in tcpCurrEstabemax2012-06-061-2/+4
| | | | | Timeout from: current, syrinx MFC after: 1 week
* General mdoc(7) and typo fixes.gjb2012-05-112-3/+3
| | | | | | PR: 167734 Submitted by: Nobuyuki Koganemaru (kogane!jp.freebsd.org) MFC after: 3 days
* memset() wants the size of the structure to clear, not the sizeharti2012-03-181-1/+1
| | | | | | of the pointer to it. Submitted by: Pawel Worach
* Adter r228571 unbreak architectures with strict alignment rulesbz2011-12-171-7/+7
| | | | by copying rather than casting.
* Include sys/queue.h: snmpmod.h uses TAILQ.trociny2011-12-111-0/+1
| | | | | PR: bin/153153 MFC after: 2 weeks
* Fix broken mdoc.uqs2011-08-011-1/+1
| | | | | Found by: manlint Approved by: re (kib)
* Properly detect interface's state in the LINK_STATE_UNKNOWN case.ru2011-05-031-2/+1
| | | | MFC after: 1 week
* Don't spam syslog with "inet_ntop(): Address family not supportedru2011-04-201-2/+3
| | | | | | | by protocol family" when processing requests received from the UNIX domain socket. MFC after: 3 days
* Bring the list of OIDs up-to-date to prevent conflicts.harti2011-02-031-1/+19
|
* Unbreak the build by temprorarily not using include directives insyrinx2010-12-204-4/+40
| | | | | bsnmpd(1)' def files, until bsd.snmpmod.mk & Makefiles are fixed to pass proper include path flags to gensnmptree.
* Bring in a SNMP module that allows configuration of SNMPv3 Notification targets.syrinx2010-12-2018-82/+1970
| | | | | | Sponsored by: The FreeBSD Foundation Reviewed by: philip Approved by: philip
* Silence the compiler warnings in libbsnmp by removing several (now)syrinx2010-12-163-21/+18
| | | | | | | unsed parameters. Sponsored by: The FreeBSD Foundation Reviewed by: philip@
* Add a forgotten file from r216294 and unbreak the build.syrinx2010-12-081-0/+404
| | | | | | Sponsored by: The FreeBSD Foundation Reviewed by: philip@ (mostly) Approved by: philip@
* In bsnmpd(1) add support for SNMPv3 message processing model, including ↵syrinx2010-12-0829-254/+4517
| | | | | | | | message authentication, packet encryption & view-based access control (RFC 3412, 3414, 3415). Sponsored by: The FreeBSD Foundation Reviewed by: philip@ (mostly) Approved by: philip@
* Remove mention of non-existant -o flag for debugging options.uqs2010-10-231-5/+3
| | | | MFC after: 3 days
* mdoc: drop even more redundant .Pp callsuqs2010-10-191-1/+0
| | | | | | No change in rendered output, less mandoc lint warnings. Tool provided by: Nobuyuki Koganemaru n-kogane at syd.odn.ne.jp
* Fix two minor typos.joel2010-08-161-2/+2
|
* Bump document date after content changes.uqs2010-08-161-1/+1
| | | | Pointy hat to: uqs
* Wordsmithing of bsnmpd.1uqs2010-08-161-18/+16
| | | | | | PR: docs/149157 Submitted by: Warren Block <wblock@wonkity.com> MFC after: 1 week
* Fix a typo introduced in r210936 which broke build.yongari2010-08-061-1/+1
|
* Ethernet vlan(4) interfaces have valid Ethernet link layer addresses butjhb2010-08-061-0/+1
| | | | | | | | use a different interface type (IFT_L2VLAN vs IFT_ETHER). Treat IFT_L2VLAN interfaces like IFT_ETHER interfaces when handling link layer addresses. Reviewed by: syrinx (bsnmpd) MFC after: 1 week
* mdoc: consistently spell our email addresses <foo@FreeBSD.org>uqs2010-05-249-18/+18
| | | | | Reviewed by: ru Approved by: harti
* (S)LIST_HEAD_INITIALIZER takes a (S)LIST_HEAD as an argument.antoine2010-03-272-2/+2
| | | | | | | Fix some wrong usages. Note: this does not affect generated binaries as this argument is not used. Approved by: harti@
* Fix typo in macro name and macro usage.uqs2010-03-122-2/+3
| | | | | | Found by: make manlint Reviewed by: ru Approved by: harti, philip (mentor)
* Fix a problem with high CPU consumption (up to 30%) by bsnmpd on a loaded ↵syrinx2009-12-035-3/+77
| | | | | | | | | | | | | system. Instead of constantly calling the mibII_idle function when the server is not busy call the function only once every 10 seconds to avoid bsnmpd constantly doing gettimeofday syscalls. Make the idle polling interval confugurable via begemotIfDataPoll. Reported and tested by: misho (at) aitbg (dot) com Oked by: harti MFC after: 1 week
* Add an extra (void *) cast. The struct if_msghdr has an 8 byteimp2009-02-181-1/+1
| | | | | | | | | | | | | | alignment requirement, while rt_msghdr has a 4 byte alignment requirement. The root cause is that if_msghdr has an struct if_data which has an 8-byte alignment requirement due to a time_t that's embedded in it. On MIPS, time_t is a 64-bit number, so must be 64-bit aligned. Since we don't access ifm_data.ifi_epoch, a simple cast is all that's necessary here. It is likely the case that ifi_epoch should *NOT* be a time_t because it is an uptime (time delta) an not an absolute time since 1970. u_long is likely sufficient there since that gives an uptime of 136 years will suffice for the foreseeable future.
* This main goals of this project are:qingli2008-12-152-76/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | 1. separating L2 tables (ARP, NDP) from the L3 routing tables 2. removing as much locking dependencies among these layers as possible to allow for some parallelism in the search operations 3. simplify the logic in the routing code, The most notable end result is the obsolescent of the route cloning (RTF_CLONING) concept, which translated into code reduction in both IPv4 ARP and IPv6 NDP related modules, and size reduction in struct rtentry{}. The change in design obsoletes the semantics of RTF_CLONING, RTF_WASCLONE and RTF_LLINFO routing flags. The userland applications such as "arp" and "ndp" have been modified to reflect those changes. The output from "netstat -r" shows only the routing entries. Quite a few developers have contributed to this project in the past: Glebius Smirnoff, Luigi Rizzo, Alessandro Cerri, and Andre Oppermann. And most recently: - Kip Macy revised the locking code completely, thus completing the last piece of the puzzle, Kip has also been conducting active functional testing - Sam Leffler has helped me improving/refactoring the code, and provided valuable reviews - Julian Elischer setup the perforce tree for me and has helped me maintaining that branch before the svn conversion
* This commit was generated by cvs2svn to compensate for changes in r176892,syrinx2008-03-071-0/+2
|\ | | | | | | which included commits to RCS files with non-trunk default branches.
| * Vendor patch: Prevent bsnmpd from dumping core when a module's init hooksyrinx2008-03-071-0/+2
| | | | | | | | | | | | returns an error. Approved by: bz (mentor), harti
* | This commit was generated by cvs2svn to compensate for changes in r163820,harti2006-10-312-28/+63
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Vendor patch: synthesize the initial value for sysObjectId from the valueharti2006-10-312-28/+63
| | | | | | | | | | | | | | of uname -r in FreeBSD. This value can be overwritten in the configuration file. Suggested by: phk
* | This commit was generated by cvs2svn to compensate for changes in r163799,harti2006-10-301-5/+6
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Vendor patch: improve readability by using the IF_Mbps macro.harti2006-10-301-5/+6
| | | | | | | | Submitted by: glebius
* | This commit was generated by cvs2svn to compensate for changes in r159063,harti2006-05-305-114/+915
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Vendor patch: add support for the BITS construct and enumerations in bothharti2006-05-305-114/+915
| | | | | | | | | | | | gensnmpdef and gensnmptree. Add include and typedef directives to gensnmptree. Submitted by: soc-sheryana (partly)
* | Don't import tree.h from the distribution - we have our own one in sys.harti2006-03-131-0/+1
| |
OpenPOWER on IntegriCloud