This is mostly bug fixes over the previous release.

The most significant chang over 5.5 is a fix to the handling of multiple matching VACM entries.

The SNMP agent now uses the “best” match, (as required by  the VACM specification), rather

than the first matching entry. Note that this could potentially affect the behaviour of existing

access control configurations.

*5.5.1*

snmplib:
- [BUG 2838243]: Correct the output of unsigned values
- [BUG 2919320]: Avoid accessing freed memory Reported by Tomasz Lis
- [BUG 2922390]: Fix test for missing contextName parameter
- [BUG 3093199]: Fixed bugs in 64-bit integer parsing
- [BUG 3134323]: Fix crash when comparing invalid OIDs
- [BUG 3171878]: Using SNMPv3 context does not work
- [PATCH 2871747]: plug memory leak in OID processing
- [PATCH 2952140]: Fix overflow of counter32 and gauge32 on 64bit systems
- [PATCH 2971270]: refuse to parse ASN.1 tokens with wrong type field
- [PATCH 3067540]: Fix IPv4 OID indexes on 64-bit big-endian systems.
- [PATCH 3058645]: Use MSG_DONTWAIT for the unix domain socket
- [PATCH 3165878]: Catch buffer overrun on 64-bit systems
- [PATCH 3203806]: Add function netsnmp_large_fd_set_select()
- Added function netsnmp_delete_table_data_set()
- Added netsnmp_xxx() memory allocation functions
- Added macro netsnmp_static_assert().
- Added snmp_sess_session_lookup().
- Avoid Valgrind complaints about uninitialized data
- Change the parsing of ranges to accept all valid values.
- Fix __cplusplus extern “C” wrapping
- Fix agent crash when sending encrypted SNMPv3 traps.
- Fix double free crash when releasing duplicated handlers
- Fix duplicate se_add_pair_to_list() memory leak
- Fix issue with USM using inactive users
- Fix potential buffer overflow when generating temp. file names
- Fix various problems with se_clear_slist()
- Force a ; at the end of the static_assert macro.
- Handle memory allocation failures in netsnmp_create_data_list
- Make sure that a mask is given to open when O_CREAT is specified

snmpd:
- [BUG 1840230]: Don’t include the index object as (pseudo-)accessible column
- [BUG 2822360]: Fix memory leak when building table OIDs
- [BUG 2841008]: Protect against crash following failed AgentX response
- [BUG 2873858]: Fix handling of schedOwner index
- [BUG 2894059]: Handle errors when counting interfaces
- [BUG 2897000]: Suppress 32-bit counter truncation warnings
- [BUG 2900078]: Add support for OID variables with size in elements
instead of bytes, correct sysObjectID to use this
- [BUG 2924140]: Fix termination of CPU/FPU types
- [BUG 2972579]: Fix checking of snmpTargetAddrRowStatus SET requests
- [BUG 3003981]: Protect against buffer overflow
- [BUG 3058101]: 64-bit systems only support writeable ‘long’ instances (not int)
- [BUG 3062538]: Fix com2sec* handling of non-default contexts
- [BUG 3178389]: Fix inconsistent handling of TZ offsets
- [BUG 3185528]: shutdown_master_agent didn’t close UDP socket
- [PATCH 2119725]: Fix skipNFSInHostResources handling of hrStorageTable
- [PATCH 2825653]: Fix sendmail.cf parsing in certain conditions
- [PATCH 2835576]: Fix endianness issues in pass/pass_persist
- [PATCH 2877518]: Fix handling of scoped AgentX variables
- [PATCH 2883155]: Fix memory leak in proxy handling
- [PATCH 2883220]: Fix compilation problems when ifXTable is not included
- [PATCH 2887816]: Protect against division-by-zero crash
- [PATCH 2901029]: Fix compiler warning on CloseHandle()
- [PATCH 2903092]: Fix broken handling of broadcast entries.
- [PATCH 2904900]: Documentation plus assorted handler code fixes
- [PATCH 2911323]: Fix agent lockup when monitoring AgentX-delegated information
- [PATCH 2911361]: Remove redundant variables
- [PATCH 2911970]: Properly terminate linked list of registrations
- [PATCH 2941811]: Handle successful requests with reqID 0
- [PATCH 2967400]: Retrieve error counters for the EtherLike-MIB
- [PATCH 2968642]: Catch overflow of pass-through command buffer
- [PATCH 2975254]: Avoid callback re-use of closed sessions
- [PATCH 3044512]: Fix sysobjectid directive
- [PATCH 3053428]: Fix get_pid_from_inode when the inode is not found
- [PATCH 3053436]: Fix tcpConnectionTable_data_access invalid memory access
- [PATCH 3058140]: Check that inode is non-zero
- [PATCH 3062526]: Fix security engineID setting in ‘trapsess’ directive
- [PATCH 3074918]: Avoid memory leaks following CONTAINER_INSERT failures
- [PATCH 3096725]: Don’t register v1Trap callback, if SNMPv1 not supported
- [PATCH 3096725]: Include SNMPv1 trap OIDs in nlmLogNotificationID column
- [PATCH 3096725]: sysORTable registation for notification log mib
- [PATCH 3141462]: fix agentx subagent issues with multiple-object requests
- [PATCH 3152412]: Handle (and report) problems reading /proc/vmstat

- Add newly created/destroyed interfaces to ipv6IfTable
- Don’t let MIB modules second-guess the cache handler
- Fix adding new addresses to ipAddressTable
- Fix engineID generation on outgoing v3 traps from the agent
- Fix erroneous “64bit wrap” warnings when computing ipSystemStats
- Fix invalid access to memory in TCP-MIB
- Fix IP-MIB::ipIfStatsReasmReqds value (typo)
- Fix IPv6 forwarding MIB object (boolean, not TruthValue)
- Fix rare race condition when reading RPM database
- Fixed race condition in hrSWRunTable
- Fix VACM persistant storage.
- Fix various memory & file-descriptor leaks
- Handle I/Fs without broadcast addresses (IF/IP-MIBs)
- Improve agent shutdown processing
- Improve error logging when freeing active caches
- Make sure that a mask is given to open when O_CREAT is specified
- Report GFS filesystems in hrStorageTable and hrFSTable
- Report real ifSpeed of (down) network interface (where possible)
- Skip non-AF_INET interfaces when loading ipv4 addrs
- Support N/W interfaces with HW address >6 bytes (e.g. InfiniBand)
in ipNetToMediaTable and ipNetToPhysicalTable.
- Support views with indexes values>255
- Suppress 32-bit truncation warnings (IP-MIB & TCP-MIB)
- Suppress missing iquerySecName warning if it won’t be needed

snmpdx:
- changed default TCP target from 0.0.0.0:705 to localhost:705

snmptrapd:
- [BUG 3151254]: Fix crash with invalid traphandle directive
- Fixed assorted double free at exit problems

snmptable:
- [BUG 2837998]: Handle missing instance subidentifiers in results
- [PATCH 2850067]: Suppress extraneous “index” header token

snmptranslate:
- fixed printing of ranges with UNSIGNED type.

snmpusm:
- Correct ifdefs, remove dead variables.

snmpwalk:
- Fix handling of end OID being longer than the starting OID

build:
- [BUG 3102904]: Build with -fno-strict-aliasing (if supported)
- Add detection of lm_sensors version
- Avoid use of “tail -1″ (non POSIX-compliant)
- Do not call VACM APIs if VACM module is not included
- Fix building static applications using net-snmp-config
- Fix compilation with rpm-4.6 (using legacy API)
- Fix ‘make test TESTOPTS=”-P tcp”‘
- Fix order of rpmlib detection and agent module configuration
- Run rpm configure checks for (rpm-based) hr_swinst rewrite
- Use a sensible default for system location (if no domain name found)

man:
- [BUG 2972860]: Update broken references
- Clean up manual pages (from Debian patch 56_manpage)

mib2c:
- [BUG 2888569]: Fix generation of table columns array
- Remove unnecessary casts to u_char*
- make the mib2c foreach ranges work as advertised in the comments

mibs:
- [BUG 2973890]: Fix imports, DiskIOEntry list and revision histories
- [PATCH 2974716]: Fix issues in the SMUX-MIB

misc:
- [PATCH 2836112]: Use the right modifier for size_t/ssize_t variables
- [PATCH 2952034]: Return of the Great SuSE ‘sprintf’ Hunt…

perl:
- [PATCH 2890931]: Better handling of Counter64 values
- [PATCH 2995098]: Fix creation of SNMPv3 sessions with API_SINGLE
- [PATCH 3046371]: Fix memory leak in SNMPv1 trap handling
- [PATCH 3049029]: Fix memory leak with snmp bulkwalks
- Don’t automatically open stderr (breaks embedded perl within the agent)
- Fix various other memory leaks, out-of-bounds array access
and uninitialized variable access issues
- Fix several “Free to wrong pool” errors

python:
- [BUG 2919379]: Initialise SNMP sessions properly
- [BUG 3088360]: Ensure python modules are built against the correct libraries
- [PATCH 2001656]: Handle null-termination of string values properly.
- [PATCH 3035328]: Detect failures in session creation
- [PATCH 3035578]: Update error codes
- Support null-bytes in octet strings

test:
- [PATCH 2952020]: Explicitly set permission on output directories
- Support dynamic analysis of regression tests
- Fix tests (T030) for MinGW

Cygwin:
- [BUG 2997492]: byte order of udpLocalPort is now correct
- Enabled Unix transport
- Fix building with IPv6, OpenSSL & embedded Perl support
- Fix building with remotely mounted source files
- Fix free UDP port detection in regression tests
- Fix out-of-range array access in ‘interfaces’ table
- libnetsnmp now builds as a DLL when configured with –enable-shared
- Omit inet_ntop.c and inet_pton.c
- perl modules do now build (–with-perl-modules).
- Removed winpipe.c from the list of source files

HP-UX:
- fix build error on HP-UX 10.20

Linux:
- [BUG 2985915]: Fix build without embedded Perl
- [PATCH 2926374]: Fix reading of ipAddressTable from /proc/net/if_inet6
- [PATCH 2959811]: Reimplement Netlink IPv6 prefix listener
- [PATCH 3083027]: Fix RPM spec file to support CentOS
- [PATCH 3107003]: Suppress ipNetToPhysicalTable error messages
for tunnel and similar (non-physical) interfaces
- Fix calculation of ifHCInUcastPkts on 32-bit Linux
- Fix udpTable indexes on big-endian 64bit Linux
- Fix value of IP-MIB::ipv6InterfaceForwarding
- Fixed 32-bit truncation warning on UCD-SNMP-MIB::systemStats
- Improved EtherLike-MIB support
- Pass correct path to rpmdbOpen, and log errors
- snmpd is again single-threaded.

NetBSD:
- DragonFly support
- Retrieve MIB-II network statistics via sysctl
- Update memory and CPU statistics handling

OpenBSD:
- Fix order of headers when checking <netinet/in_pcb.h>
- Support updating the routing table
- Update SWRun code to use kvm_getproc2

Solaris:
- Fix crash triggered by missing package version information

Windows:
- [BUG 2969872]: Ensure SOCK_STARTUP is invoked before init_agent
- [BUG 2971257]: Fixed winExtDLL handling of multi-varbind getNext
requests with OIDs in reverse lexicographical order
- Avoid test failure (T200) on known MS SNMP extension DLL bugs
- Fix and improve batch build using recent versions of Visual Studio
- Fix build under MinGW
- Fix build with 64-bit compiler
- Fix building with IPv6 and OpenSSL support
- Fix handling of strtoull (both MSVC 6.0, and 2002 & above)
- Fix handling of winExtDLL multi-varbind SET requests
- Fix MIB output truncation with winExtDLL GETNEXT requests
- Fix out-of-range array access in ‘interfaces’ table
- Halt agent on key press, when run in command prompt window (to aid debugging)
- Improve Net-SNMP DLL build
- Improve support for winExtDLL build
- Suppress/remove various compilation warnings
- winExtDLL: Don’t trigger an assertion if no extension DLLs loaded
- winExtDLL: Improve RFC-compliance of response error codes
- winExtDLL: Log the reason why loading an extension DLL fails
- winExtDLL: Fix a memory leak when SnmpExtensionQuery(Ex) fails

What has Changed recently?

——————————————-

The NEWS file snippits from these releases are as follows.  See the

CHANGES and ChangeLog files for increasing levels of detail.  The

following shows the NEWS for both 5.6 (which wasn’t announced) and

5.6.1:

*5.6.1*

General:

- The DTLS and TLS transports and the TSM security model are no

longer “beta” (they’ve undergone rigorous interoperability testing).

- Many Bug Fixes (see the CHANGES and ChangeLog files for full details)

snmpd:

- Patch 3141462: from fenner: fix agentx subagent issues with

multiple-object requests

- Patch from Niels to fix VACM persistant storage.

*5.6*

all:

- Implemented the SNMP over TLS and SNMP over DTLS protocols [RFC5953]

See http://www.net-snmp.org/wiki/index.php/TUT:Using_TLS

- Implemented the “Transport Security Model” [RFC5591]

- Generic host-specific configuration .conf files are now read.

See the HOST-SPECIFIC FILES section of the snmp.conf manual page

and http://www.net-snmp.org/wiki/index.php/Configuration

- Include statements can now be used in .conf files.

See http://www.net-snmp.org/wiki/index.php/Configuration

snmpd:

- Fix handling of multiple matching VACM entries. (Use the “best”

match, rather than the first one). Reported by Adam Lewis. Note

that this could potentially affect the behaviour of existing access

control configurations.

- Agent will no longer call table handlers if a set request for the

handler has invalid indexes

- table_data/tdata next handler will not be called during get

processing if no valid rows are found for the handler

- [PATCH 2952708]: Added Perl implementation of BRIDGE-MIB

- moved all functions defined in libnetsnmphelpers to

libnetsnmpagent. libnetsnmphelpers is now an empty library.

- Implemented the TSM-MIB and the TLSTM-MIB

- new API for indicating that persistent store needs to be saved

after the current request finishes processing

- [PATCH 2931446]: make the load averages writable.

apps:

- A new tool ‘net-snmp-cert’ that easily creates and manages

X.509 certificates for use with the SNMP over (D)TLS protocols.

- Added an ‘agentxtrap’ command to send notifications via AgentX

(See http://www.net-snmp.org/wiki/index.php/TUT:agentxtrap for details)

- -T command line flag can be used to pass configuration

directly to transports that can accept configuration tokens

- A new ‘snmptls’ command for manipulating the agent’s TLS configuration

snmplib:

- A more modular transport subsystem that allows third party

extensions and dependencies for code reuse.

- New transport functions: f_config, f_open, f_copy and f_setup_session

- Transports can now specify session defaults

- E.G. dtlsudp: auto-sets the SNMP version and the security model.

- [PATCH 2942940]: Add a new function, netsnmp_parse_args, that is

like snmp_parse_args but takes an additional bitmask, flags, to

affect the behaviour. Also remove the magic handling of some

application names.

- A new X.509 certificate API for indexing and reading certificates

- new experimental row creation API which uses a state machine

to try really hard to create a row from a given varbind list

- netsnmp_container enhancements:

- added a free_item function

- added a CONTAINER_FREE_ALL macro/function

- added an interface for duplicating a container (CONTAINER_DUP)

- added a remove function to container_iterators

- added an ability to set options on binary_array containers

- new snmp token logOption allows specifying log destinations

via configuration conf files

- A very significant reduction in compiler warning output

- new experimental simple state machine handling API

building:

- Support for a stream-line stripped down version of internal

OpenSSL support using –with-openssl=internal.

- Do not require that the UDP transport is included.

- Building Net-SNMP with dmalloc support enabled is again possible.

mib2c:

- mib2c can now optionally run sed on generated code

testing:

- A brand new test infrastructure supporting multiple test suites

See perldoc testing/RUNFULLTESTS for details

python:

- walking broken agents won’t cause an infinite loop

win32:

- IPv6 is only supported under Cygwin 1.7 or later.

- [BUG 2939168]: byte order of udpLocalPort is now correct.

- [BUG 2939168]: fixed test infrastructure (“make test”). This has

been fixed by using the proper environment separator character and

by adding the path of the netstat executable for Cygwin in

testing/TESTCONF.sh.

- building with another OpenSSL package than the Cygwin-provided

packages openssl and openssl-devel is again possible.

- running the regression test suite is again possible (‘make test’).

- winExtDLL compiles now under MinGW.

- the snmpd.conf keyword ‘extend’ is now supported under MinGW

- the snmptrapd.conf keyword traphandle is now supported under MinGW

qnx6:

- [PATCH 2836895]: support for QNX6

Where can I get it?

——————

Download:

- http://www.net-snmp.org/download.html

Web page:

- http://www.net-snmp.org/

Sourceforge Project page:

- http://www.net-snmp.org/project/net-snmp/

Are there binaries available?

—————————-

- Binaries do appear on our download site, but often are published a

bit later than the normal source code.  Most of the binaries that

are available have been linked with the OpenSSL package so you’ll

need a copy of it installed in order to use them.  If you don’t

have OpenSSL installed and don’t want it installed, please get the

net-snmp source release instead and built it yourself (but you’ll

loose support for SNMPv3 with SHA1 authentication and both DES and

AES encryption).

What operating systems does it run on?

————————————-

Both the applications and the agent have been reported as running

(at least in part) on the following operating systems:

* Linux (kernels 2.6 to 1.3)

* Solaris/SPARC (11 to 2.3), Solaris/Intel (10, 9) — see

README.solaris

* HP-UX (11.31 to 9.01) — see README.hpux11

* Mac OS X (10.5 to 10.1) — see README.osX

* NetBSD (2.0 to 1.0)

* FreeBSD (7.0 to 2.2)

* OpenBSD (4.0 to 2.6)

* BSDi (4.0.1 to 2.1)

* AIX (6.1, 5.3, 5.2, 5.1, 4.3.3, 4.1.5, 3.2.5) — see README.aix

* IRIX (6.5 to 5.1)

* OSF (4.0, 3.2 and Tru64 Unix 5.1B) — see README.tru64

* SunOS 4 (4.1.4 to 4.1.2)

* Ultrix (4.5 to 4.2)

* Dynix/PTX 4.4

* QNX 6.2.1A

See our FAQ at http://www.net-snmp.org/wiki/index.php/FAQ for more

details on portability of the Net-SNMP package.

Which versions of the SNMP protocol are supported in this package?

—————————————————————–

SNMPv1, SNMPv2c, and SNMPv3 (including user-based (USM) support, and

an alpha implementation of kerberos-based, ssh-based and DTLS-based support)

What’s the difference between UCD-SNMP and Net-SNMP?

—————————————————

Not a great deal, really.

Although the project originally started at UC Davis (hence the name),

and it has always been based there, most of the contributors have had

little or no connection with this institution.

The move to SourceForge was intended to provide a more flexible

environment for the project, and to distribute the administrative

workload more evenly.  The change of name simply reflects this move,

which was the last remaining link with UC Davis.

The 4.2.x line is the last release line that uses the ucd-snmp name,

and all releases under this banner will be bug-fixes only.  Release

5.0 is the first version using the net-snmp name, and all new features

and significant development will be released under this name.

(Though the dividing line between a bug-fix and a new feature is

something of a vague one, so some changes in the 4.2.x line may be

relatively non-trivial!)

This is mostly bug fixes over the previous release.

The most significant changes over 5.4.2 are:

- improved support for building on Linux and Windows systems,

- AgentX support listens on localhost (only) by default

- improved handling of multiple matching access control entries

- support for monitoring large disks (>2Tb).

This release also includes the fix for CVE-2008-4309 (which was previously made available as the security release 5.4.2.1)

Download URL:

http://sourceforge.net/projects/net-snmp/files/net-snmp/5.4.3/