Extending SNMP - how to change STRING to GAUGE

Josh_Dillig — Fri, 31 Jan 2020 16:03:34 GMT

We are experimenting with using userDefinedSettings.conf settings to SNMP query the gateway for custom statistics and statuses. We have run into an issue where the returned data needs to be formatted as a GAUGE not the default STRING. Any idea how to do this?

UserDefinedSettings.conf:

[Expert@gateway:0]# cat /etc/snmp/userDefinedSettings.conf
extend .1.3.6.1.4.1.8072.35 fwhc /home/admin/fw_health_check.sh snmp checkScore

Script Output:

[Expert@gateway:0]# /home/admin/fw_health_check.sh snmp checkScore
8

SNMPWALK output:

[Expert@gateway:0]# snmpwalk -v2c -c public localhost .1.3.6.1.4.1.8072.35
NET-SNMP-MIB::netSnmp.35.1.0 = INTEGER: 1
NET-SNMP-MIB::netSnmp.35.2.1.2.4.102.119.104.99 = STRING: "/home/admin/fw_health_check.sh"
NET-SNMP-MIB::netSnmp.35.2.1.3.4.102.119.104.99 = STRING: "snmp checkScore"
NET-SNMP-MIB::netSnmp.35.2.1.4.4.102.119.104.99 = ""
NET-SNMP-MIB::netSnmp.35.2.1.5.4.102.119.104.99 = INTEGER: 5
NET-SNMP-MIB::netSnmp.35.2.1.6.4.102.119.104.99 = INTEGER: 1
NET-SNMP-MIB::netSnmp.35.2.1.7.4.102.119.104.99 = INTEGER: 1
NET-SNMP-MIB::netSnmp.35.2.1.20.4.102.119.104.99 = INTEGER: 4
NET-SNMP-MIB::netSnmp.35.2.1.21.4.102.119.104.99 = INTEGER: 1
NET-SNMP-MIB::netSnmp.35.3.1.1.4.102.119.104.99 = STRING: "8"
NET-SNMP-MIB::netSnmp.35.3.1.2.4.102.119.104.99 = STRING: "8"
NET-SNMP-MIB::netSnmp.35.3.1.3.4.102.119.104.99 = INTEGER: 1
NET-SNMP-MIB::netSnmp.35.3.1.4.4.102.119.104.99 = INTEGER: 0
NET-SNMP-MIB::netSnmp.35.4.1.2.4.102.119.104.99.1 = STRING: "8" <--- Output

Re: Extending SNMP - how to change STRING to GAUGE

Diego_dg — Fri, 06 Aug 2021 07:24:00 GMT

Hi! I have the same problem, anybody found how to configure the new OID as GAUGE or INTEGER?

Re: Extending SNMP - how to change STRING to GAUGE

Tobias_Moritz — Fri, 06 Aug 2021 10:39:16 GMT

Because this is not Check Point specific but standard NetSNMP, I suggest looking at Manpage of SNMPD.CONF and try to make use of the pass directive instead of the extend one.

I haven't tried this myself, so I cannot tell you if this works on Check Points version of NetSNMP, but it should because Gaia Hardening Specification says they used the NetSNMP RPM from RHEL 7.4/7.6 distribution and only added SHA-256 and SHA-512 support for USM users.

Maybe you can share your results here.

topic Re: Extending SNMP - how to change STRING to GAUGE in General Topics

Extending SNMP - how to change STRING to GAUGE

Re: Extending SNMP - how to change STRING to GAUGE

Re: Extending SNMP - how to change STRING to GAUGE