/* $OpenBSD: snmpclient.c,v 1.19 2018/12/13 10:54:29 martijn Exp $ */ /* * Copyright (c) 2013 Reyk Floeter * * Permission to use, copy, modify, and distribute this software for any * purpose with or without fee is hereby granted, provided that the above * copyright notice and this permission notice appear in all copies. * * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */ #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include "snmpd.h" #include "mib.h" #include "ber.h" #include "parser.h" struct snmpc { size_t sc_root_len; struct ber_oid sc_root_oid; struct ber_oid sc_last_oid; struct ber_oid sc_oid; u_int32_t sc_msgid; int sc_fd; int sc_retry; int sc_retry_max; const char *sc_community; int sc_version; int sc_nresp; }; #define SNMPC_RETRY_MAX 3 #define SNMPC_COMMUNITY "public" #define SNMPC_OID_DEFAULT "system" #define SNMPC_OID_ALL "1.0" #define SNMPC_MAXREPETITIONS 10 #define SNMPC_DATEANDTIME_LEN 11 #define SNMPC_DATEANDTIME_SHORT_LEN 8 void snmpc_run(struct snmpc *, enum actions, const char *); void snmpc_request(struct snmpc *, unsigned int); int snmpc_response(struct snmpc *); int snmpc_sendreq(struct snmpc *, unsigned int); int snmpc_recvresp(int, int, u_int32_t, struct ber_element **); struct display_hint * snmpc_display_hint_lookup(struct ber_oid *); void snmpc_display_hint(struct ber_oid *, char **); char *snmpc_physaddress(char *); char *snmpc_dateandtime(char *); struct display_hint { struct ber_oid oid; char *(*print)(char *); } display_hints[] = { { { { MIB_ifPhysAddress } }, snmpc_physaddress }, { { { MIB_ipNetToMediaPhysAddress } }, snmpc_physaddress }, { { { MIB_hrSystemDate } }, snmpc_dateandtime } }; void snmpclient(struct parse_result *res) { struct snmpc sc; struct addrinfo hints, *ai, *ai0; int s; int error; u_int i; struct parse_val *oid; for (i = 0; i < sizeof(display_hints) / sizeof(display_hints[0]); i++) smi_oidlen(&display_hints[i].oid); if (pledge("stdio inet dns", NULL) == -1) fatal("pledge"); bzero(&sc, sizeof(sc)); /* Get client configuration */ if (res->community == NULL) res->community = strdup(SNMPC_COMMUNITY); if (res->version == -1 || res->version > SNMP_V2) res->version = SNMP_V2; if (res->community == NULL) err(1, "strdup"); /* Checks */ if ((res->action == BULKWALK) && (res->version < SNMP_V2)) errx(1, "invalid version for bulkwalk"); /* Resolve target host name */ bzero(&hints, sizeof(hints)); hints.ai_family = PF_UNSPEC; hints.ai_socktype = SOCK_DGRAM; error = getaddrinfo(res->host, "snmp", &hints, &ai0); if (error) errx(1, "%s", gai_strerror(error)); s = -1; for (ai = ai0; ai; ai = ai->ai_next) { if ((s = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol)) == -1) { continue; } /* use first available address */ break; } if (s == -1) errx(1, "invalid host"); if (connect(s, (struct sockaddr *)ai->ai_addr, ai->ai_addrlen) == -1) errx(1, "cannot connect"); freeaddrinfo(ai0); if (pledge("stdio", NULL) == -1) fatal("pledge"); sc.sc_fd = s; sc.sc_community = res->community; sc.sc_version = res->version; sc.sc_retry_max = SNMPC_RETRY_MAX; if (TAILQ_EMPTY(&res->oids)) { snmpc_run(&sc, res->action, SNMPC_OID_DEFAULT); } else { TAILQ_FOREACH(oid, &res->oids, val_entry) { snmpc_run(&sc, res->action, oid->val); } } close(sc.sc_fd); } void snmpc_run(struct snmpc *sc, enum actions action, const char *oid) { if (strcmp("all", oid) == 0) oid = SNMPC_OID_ALL; /* * Set up the root OID and get the prefix length to shorten the * printed OID strings of the children. */ if (smi_string2oid(oid, &sc->sc_oid) == -1) errx(1, "oid"); bcopy(&sc->sc_oid, &sc->sc_root_oid, sizeof(sc->sc_root_oid)); bcopy(&sc->sc_oid, &sc->sc_last_oid, sizeof(sc->sc_last_oid)); if (sc->sc_oid.bo_n > 2) sc->sc_root_len = sc->sc_oid.bo_n - 1; sc->sc_nresp = 0; if (action == GET) snmpc_request(sc, SNMP_C_GETREQ); else if (action == BULKWALK) snmpc_request(sc, SNMP_C_GETBULKREQ); else snmpc_request(sc, SNMP_C_GETNEXTREQ); } void snmpc_request(struct snmpc *sc, unsigned int type) { struct pollfd pfd[1]; int nfds, ret; /* Send SNMP request */ if (snmpc_sendreq(sc, type) == -1) err(1, "request failed"); /* Wait for response */ pfd[0].fd = sc->sc_fd; pfd[0].events = POLLIN; nfds = poll(pfd, 1, 3 * 1000); if (nfds == -1 || (pfd[0].revents & (POLLERR|POLLHUP|POLLNVAL))) errx(1, "poll error"); if (nfds == 0) { if (sc->sc_retry++ < sc->sc_retry_max) { warnx("time out, retry %d/%d", sc->sc_retry, sc->sc_retry_max); snmpc_request(sc, type); return; } errx(1, "time out"); } sc->sc_retry = 0; if ((ret = snmpc_response(sc)) != 0) { if (ret == -1) err(1, "response"); return; } if (type == SNMP_C_GETREQ) return; snmpc_request(sc, type); } int snmpc_response(struct snmpc *sc) { char buf[BUFSIZ]; struct ber_element *resp = NULL, *s, *e; char *value = NULL, *p; int ret = 0; /* Receive response */ if (snmpc_recvresp(sc->sc_fd, sc->sc_version, sc->sc_msgid, &resp) == -1) return (-1); if (ber_scanf_elements(resp, "{SS{SSSS{e}}", &s) != 0) goto fail; for (; s != NULL; s = s->be_next) { if (ber_scanf_elements(s, "{oe}", &sc->sc_oid, &e) != 0) goto fail; /* Break if the returned OID is not a child of the root. */ if (sc->sc_nresp && (ber_oid_cmp(&sc->sc_root_oid, &sc->sc_oid) != 2 || e->be_class == BER_CLASS_CONTEXT || e->be_type == BER_TYPE_NULL)) { ret = 1; break; } if ((value = smi_print_element(e)) != NULL) { smi_oid2string(&sc->sc_oid, buf, sizeof(buf), sc->sc_root_len); snmpc_display_hint(&sc->sc_oid, &value); p = buf; if (*p != '\0') printf("%s=%s\n", p, value); else printf("%s\n", value); free(value); } bcopy(&sc->sc_oid, &sc->sc_last_oid, sizeof(sc->sc_last_oid)); } sc->sc_nresp++; ber_free_elements(resp); return (ret); fail: if (resp != NULL) ber_free_elements(resp); errno = EINVAL; return (-1); } void snmpc_display_hint(struct ber_oid *oid, char **val) { struct display_hint *h; char *newval; if (*val == NULL || strlen(*val) == 0) return; if ((h = snmpc_display_hint_lookup(oid)) == NULL) return; /* best-effort translation */ if ((newval = h->print(*val)) == NULL) return; free(*val); *val = newval; } char * snmpc_physaddress(char *v) { char buf[ETHER_ADDR_LEN + 2]; char *str; ssize_t n; n = strnunvis(buf, v, ETHER_ADDR_LEN + 2); if (n == -1 || n != ETHER_ADDR_LEN + 2) return (NULL); if (asprintf(&str, "\"%02hhx:%02hhx:%02hhx:%02hhx:%02hhx:%02hhx\"", buf[1], buf[2], buf[3], buf[4], buf[5], buf[6]) == -1) return (NULL); return (str); } char * snmpc_dateandtime(char *v) { char buf[SNMPC_DATEANDTIME_LEN + 2]; u_int16_t year; char *str; ssize_t n; if ((n = strnunvis(buf, v, SNMPC_DATEANDTIME_LEN + 2)) == -1) return (NULL); bcopy(&buf[1], &year, sizeof(year)); year = ntohs(year); switch (n) { case SNMPC_DATEANDTIME_SHORT_LEN + 2: if (asprintf(&str, "\"%hu-%.02hhu-%.02hhu %.02hhu:%.02hhu:%.02hhu\"", year, buf[3], buf[4], buf[5], buf[6], buf[7]) == -1) return (NULL); break; case SNMPC_DATEANDTIME_LEN + 2: if (asprintf(&str, "\"%hu-%.02hhu-%.02hhu %.02hhu:%.02hhu:%.02hhu" "%c%.02hhu%.02hhu\"", year, buf[3], buf[4], buf[5], buf[6], buf[7], buf[9], buf[10], buf[11]) == -1) return (NULL); break; default: return (NULL); } return (str); } struct display_hint * snmpc_display_hint_lookup(struct ber_oid *oid) { u_int i, j, found; for (i = 0; i < sizeof(display_hints) / sizeof(display_hints[0]); i++) { if (oid->bo_n < display_hints[i].oid.bo_n) continue; found = 1; for (j = 0; j < display_hints[i].oid.bo_n; j++) { if (oid->bo_id[j] != display_hints[i].oid.bo_id[j]) { found = 0; break; } } if (found) return (&display_hints[i]); } return (NULL); } int snmpc_sendreq(struct snmpc *sc, unsigned int type) { struct ber_element *root, *b; struct ber ber; ssize_t len; u_int8_t *ptr; int erroridx = 0; if (type == SNMP_C_GETBULKREQ) erroridx = SNMPC_MAXREPETITIONS; /* SNMP header */ sc->sc_msgid = arc4random() & 0x7fffffff; if ((root = ber_add_sequence(NULL)) == NULL) return (-1); if ((b = ber_printf_elements(root, "ds{tddd{{O0}}", sc->sc_version, sc->sc_community, BER_CLASS_CONTEXT, type, sc->sc_msgid, 0, erroridx, &sc->sc_oid)) == NULL) { errno = EINVAL; goto fail; } #ifdef DEBUG fprintf(stderr, "REQUEST(%u):\n", type); smi_debug_elements(root); #endif bzero(&ber, sizeof(ber)); len = ber_write_elements(&ber, root); if (ber_get_writebuf(&ber, (void *)&ptr) < 1) goto berfail; if (send(sc->sc_fd, ptr, len, 0) == -1) goto berfail; ber_free_elements(root); ber_free(&ber); return (0); berfail: ber_free(&ber); fail: ber_free_elements(root); return (-1); } int snmpc_recvresp(int s, int msgver, u_int32_t msgid, struct ber_element **respptr) { char buf[READ_BUF_SIZE]; ssize_t rlen; struct ber ber; struct ber_element *resp = NULL; char *comn; long long ver, id; if ((rlen = recv(s, buf, sizeof(buf), MSG_WAITALL)) == -1) return (-1); bzero(&ber, sizeof(ber)); ber_set_application(&ber, smi_application); ber_set_readbuf(&ber, buf, rlen); #ifdef DEBUG fprintf(stderr, "RESPONSE (%ld bytes):\n", rlen); #endif resp = ber_read_elements(&ber, NULL); if (resp == NULL) goto fail; #ifdef DEBUG smi_debug_elements(resp); #endif if (ber_scanf_elements(resp, "{is{i", &ver, &comn, &id) != 0) goto fail; if (!(msgver == (int)ver && msgid == (u_int32_t)id)) goto fail; *respptr = resp; return (0); fail: if (resp != NULL) ber_free_elements(resp); errno = EINVAL; return (-1); }