Document control page

Use this information to track changes between versions of this guide.

Table 1. Document modification history

Document version

Publication date

Comments

SC23-6003-00

October 10, 2007

First IBM publication.

SC23-6003-01

December 29, 2007

VRM number updated.

Summary table updated.

Note about the lack of support for V3 privacy on the Windows version of the probe removed. The Windows version of the probe now supports V3 privacy and authentication.

List of supported traps and informs clarified.

List of statistics logged by the probe updated.

Tip about setting the TrapQueueMax property to avoid dropping events during a trap burst added.

SC23-6003-02

July 25, 2008

Support for Linux® for zSeries added.

IPv6 support information added.

Information about the compatibility of the probe with Federal Information Processing Standards (FIPS) added.

SC23-6003-03

April 30, 2009

Support for the Configuration Analyser added.

Summary section updated.

Installing the probe topic added.

Installing the Configuration Analyser topic added.

Configuring the probe environment topic updated.

Running the Configuration Analyser topic added.

SC11-7728-00

November 6, 2009

Functionality added to enable the probe to perform additional processing on rules files.

SC11-7728-01

July 1, 2011

FIPS compatability statement added to Summary.

Installation section replaced by Installing probes.

Prerequisites information added to Running the probe as suid root.

SNMP GET and SET operations updated in Rules file processing.

SC11-7728-02

July 6, 2012

Changes made to enable you configure the probe to meet the Common Criteria assurance level of EAL4+. The Common Criteria version of this guide is available from the IBM Passport Advantage website.

http://www.google.com

SC11-7728-03

November 30, 2012

Added note regarding Common Criteria version of this probe to SNMP.

Added Firewall considerations.

Added information on properties that define the locations of the mttrapd.conf file and the hashed file to Adding new users to the configuration file.

Enhanced Example configuration.

SNMP GET and SET operations updated in Rules file processing.

Added Managing the SNMP agent over the probe's HTTP/HTTPS interface.

Added DSALogs and DSAPeriod properties to Properties and command line options.

Updated Error messages.

Added Known Issues.

SC11-7728-04

March 14, 2013

Add information on get and set functions for SNMP V2c and V3 to Rules file processing.

Updated Managing the SNMP agent over the probe's HTTP/HTTPS interface to include get and set commands for SNMP V2c and V3.

Updated Static elements to include the elements specific to remotely managing the SNMP agent over HTTP/HTTPS.

Updated the Summary and Known Issues to include information on IPv6 support on the Microsoft Windows operating system.

Updated Error messages.

SC11-7728-05

July 5, 2013

Added Configuration files, Probe properties, Defining the startup behavior, and Probe initialization to SNMP V3 support.

Updated Adding new users to the configuration file in SNMP V3 support.

Added ReuseEngineBoots, SnmpConfigChangeDetectionInterval and UsmUserBase properties to Properties and command line options.

Updated Running the probe as suid root.

Fixes: Version 16 of the SNMP Probe includes fixes for the following APARs:

  • IV49788: Rebuilt probe to incorporate changes made in IV40476.

SC11-7728-06

November 8, 2013

Updated Configuration files, Probe properties, Adding new users to the configuration file, and Probe initialization in SNMP V3 support.

Updated Paths used by the probe and added Logging lost traps in Data acquisition.

Updated Error messages.

Updated Running the probe as suid root in Running the probe.

Fixes: Version 17 of the SNMP Probe includes fixes for the following APARs:

  • IV50344: Fixed virtual memory growth issue when realtime configuration update feature is enabled.

SC11-7728-07

January 24, 2014

Topics added:

Getting started

Configuring the probe

Limiting processing to SNMP V3 only

Minimum security level for trap processing

ObjectServer information

Communications information

Logging performance data

Heartbeat

Support for Unicode and non-Unicode characters

Topics updated:

SNMP V3 support

Queue and buffer settings

NoNameResolution, snmpv3ONLY, SocketSize, and TrapQueueMax in Properties and command line options

Running the probe

Fixes: Version 18 of the SNMP Probe includes fixes for the following APARs:

  • IV63794: Added support for the DSALog properties.
  • IV66556: Hostname resolution failed on 64-bit Solaris and Linux.

SC11-7728-08

December 11, 2014

Summary updated.

Monitoring flood conditions at IP addresses added.

Description for the TrapStat property added to Properties and command line options.

Error messages and ProbeWatch messages updated.

Fixes: Version 19 of the SNMP Probe includes fixes for the following APARs:

  • IV65309: Collect incoming trap statistics and identify event flood in probe.

SC11-7728-09

March 12, 2015

Summary updated.

Writing resolved host names and discarded host names to flat files added.

Description for the following properties were added to Properties and command line options:

  • ActiveHostnameDuration
  • RefreshHostnameInterval
  • HostnameTableSize

Error messages updated.

Fixes: Version 20 of the SNMP Probe includes fixes for the following APARs:

  • IV68119: Fix on memory freeing sequence for trap stat feature.
  • IV68690: Provide a file identifying probe-specific rules functions for use by the Syntax Probe.

SC11-7728-10

June 30, 2016

Troubleshooting added.

SC11-7728-11

November 24, 2016

Known Issues updated on page 60.

Troubleshooting updated on page 62.

SC11-7728-12

June 28, 2019

The following topics updated to clarify the usage of the mttrapd.conf file:

SC11-7728-13

October 31, 2019

Guide updated for version 21 of the SNMP Probe.

Summary updated.

Support for the Configuration Analyser deprecated. References to the Configuration Analyser and mttrapd_check.jar removed.

The following topics added:

Description for the following properties were added to Properties and command line options:

  • ConfigCryptoAlgo
  • ConfigCryptoKeyFile
  • EnableCryptoConfig
  • EngineProbeWatch

Fixes and enhancements:

Version 21 of the SNMP Probe includes fixes for the following APARs:

  • IJ01162: Fixed issue on probe crashing when a trap fails IP format validation.
  • IV94048: Fixed issue on probe not using the specified port number for snmpset_p and snmpget_p function.
  • IV70329: Probe now will not check availability of the connection when Heartbeat property is set to 0.
  • IJ16506: Fixed issue which made probe not able to receive traps with SHA-256 authentication type.
  • IV76246: Fixed vulnerability in Net-SNMP due to known defect documented in Bug #2615: http://sourceforge.net/p/net-snmp/code/ci/f23bcd3ac6ddee5d0a48f9703007ccc738914791.

  • IJ16506: Fixed issue which made probe not able to receive traps with SHA-256 authentication type.

    IJ16407: Segmentation fault caused by the attempt to process non-existent buffer when mttrapd.conf is unavailable, or fails to be opened by the probe.

This version of the probe also includes the following enhancements:

  • RFE 126930: Probe enhanced so that mttrapd needs no reboot when remote devices reboot with old boot. Also the following commands added: update_engine HTTP command to allow users to update Engine Boots and Engine Time of the existing SNMPv3 engines in ConfPath and print_engine_info HTTP command to print live engine information to a specified text file.
  • RFE 119237: Crypto processing for SNMP configuration file (mttrapd.conf).

SC11-7728-14

October 30, 2020

Guide updated for version 22 of the SNMP Probe.

Summary updated.

Fixes:

Version 22 of the SNMP Probe includes fixes for the following APARs:

  • IJ24466: Fixed issue whereby the probe responded with incorrect acknowledgment for SNMP Informs with AES, AES-192 and AES-256 privacy types, hence causing timeout error to the sender.
  • IJ26463: Fixed issue of ProbeWatch events for updating engine_boot or engine_time may get deduplicated, causing only either one of engine_boot or engine_time being corrected but not both.
  • IJ27412: Fixed file leak issue with the persistent configuration file when ConfPath property is unset. To avoid this issue, the probe will now disable the SnmpConfigChangeDetectionInterval feature when the ConfPath property value is unset or empty.
  • IJ22889: Fixed issue in which the probe could not start due to a required file (mttrapd.conf) not being created by users, especially users who are not using SNMP V3. The file mttrapd.conf with example in remarked form is now bundled together and will be installed alongside.