phpman > man > SNMPCMD(1)

Markdown | JSON | MCP    

SNMPCMD(1)                                    Net-SNMP                                    SNMPCMD(1)



NAME
       snmpcmd - options and behaviour common to most of the Net-SNMP command-line tools

SYNOPSIS
       snmpcmd [OPTIONS] AGENT [PARAMETERS]

DESCRIPTION
       This  manual  page describes the common options for the SNMP commands: snmpbulkget, snmpbulk‐‐
       walk, snmpdelta, snmpget, snmpgetnext, snmpnetstat, snmpset, snmpstatus, snmptable, snmptest,
       snmptrap,   snmpdf, snmpusm , snmpwalk .  The command line applications use the SNMP protocol
       to communicate with an SNMP capable network entity, an agent.  Individual applications  typi‐
       cally  (but not necessarily) take additional parameters that are given after the agent speci‐
       fication.  These parameters are documented in the manual pages for each application.

COMMAND-LINE CONFIG OPTIONS
       In addition to the options described in this manual page, all of the tokens described in  the
       snmp.conf  and  other .conf manual pages can be used on the command line of Net-SNMP applica‐
       tions as well by prefixing them with "--".  EG, specifying --dontLoadHostConfig=true  on  the
       command line will turn off loading of the host specific configuration files.

       The  snmp.conf  file  settings  and the double-dash arguments over-ride the single-dash argu‐
       ments.  So it's important to note that if single-dash arguments aren't  working  because  you
       have  settings  in  the  snmp.conf  file  that conflict with them then you'll need to use the
       longer-form double-dash arguments to successfully trump the snmp.conf file settings.

Generic Options
       These options control how the Net-SNMP commands behave regardless of what version of SNMP you
       are  using.   See  further below for options that control specific versions or sub-modules of
       the SNMP protocol.

       -d     Dump (in hexadecimal) the raw SNMP packets sent and received.

       -D[TOKEN[,...]]
              Turn on debugging output for the given TOKEN(s).  Try ALL for extremely  verbose  out‐
              put.


       -h, --help
              Display a brief usage message and then exit.

       -H     Display  a  list  of  configuration file directives understood by the command and then
              exit.

       -I [brRhu]
              Specifies input parsing options. See INPUT OPTIONS below.

       -L [eEfFoOsS]
              Specifies output logging options. See LOGGING OPTIONS below.

       -m MIBLIST
              Specifies a colon separated list of MIB modules (not files) to load for this  applica‐
              tion.   This  overrides (or augments) the environment variable MIBS, the snmp.conf di‐
              rective mibs, and the list of MIBs hardcoded into the Net-SNMP library.

              If MIBLIST has a leading '-' or '+' character, then the MIB modules listed are  loaded
              in  addition to the default list, coming before or after this list respectively.  Oth‐
              erwise, the specified MIBs are loaded instead of this default list.

              The special keyword ALL is used to load all MIB modules in the  MIB  directory  search
              list.   Every  file  whose name does not begin with "." will be parsed as if it were a
              MIB file.

       -M DIRLIST
              Specifies a colon separated list of directories to search for  MIBs.   This  overrides
              (or  augments)  the environment variable MIBDIRS, the snmp.conf directive mibdirs, and
              the default directory hardcoded into the Net-SNMP library (/usr/share/snmp/mibs).

              If DIRLIST has a leading '-' or '+' character, then the given directories are added to
              the  default list, being searched before or after the directories on this list respec‐
              tively.  Otherwise, the specified directories are searched  instead  of  this  default
              list.

              Note  that  the directories appearing later in the list have have precedence over ear‐
              lier ones.  To avoid searching any MIB directories, set the MIBDIRS environment  vari‐
              able to the empty string ("").

              Note  that MIBs specified using the -m option or the mibs configuration directive will
              be loaded from one of the directories listed by the -M option (or  equivalents).   The
              mibfile  directive  takes a full path to the specified MIB file, so this does not need
              to be in the MIB directory search list.

       -v 1 | 2c | 3
              Specifies the protocol version to use: 1 (RFCs 1155-1157), 2c (RFCs 1901-1908),  or  3
              (RFCs 2571-2574).  The default is typically version 3.  Overrides the defVersion token
              in the snmp.conf file.  -O [abeEfnqQsStTuUvxX] Specifies output printing options.  See
              OUTPUT OPTIONS below.

       -P [cdeRuwW]
              Specifies MIB parsing options.  See MIB PARSING OPTIONS below.

       -r retries
              Specifies the number of retries to be used in the requests. The default is 5.

       -t timeout
              Specifies  the  timeout  in seconds between retries. The default is 1.  Floating point
              numbers can be used to specify fractions of seconds.

       -V, --version
              Display version information for the application and then exit.

       -Yname="value"

       --name="value"
              Allows one to specify any token ("name") supported in the snmp.conf file and sets  its
              value  to  "value".  Overrides  the  corresponding  token  in  the snmp.conf file. See
              snmp.conf(5) for the full list of tokens.



SNMPv3 Options
       The following options are generic to all forms of SNMPv3,  regardless  of  whether  it's  the
       original SNMPv3 with USM or the newer SNMPv3 over (D)TLS support.


       -l secLevel
              Set  the  securityLevel  used  for SNMPv3 messages (noAuthNoPriv|authNoPriv|authPriv).
              Appropriate pass phrase(s) must provided when using any level  higher  than  noAuthNo‐
              Priv.  Overrides the defSecurityLevel token in the snmp.conf file.

       -n contextName
              Set  the  contextName  used for SNMPv3 messages.  The default contextName is the empty
              string "".  Overrides the defContext token in the snmp.conf file.


SNMPv3 over TLS Options
       These options pass transport-specific parameters to the TLS layer.  If you're using SNMP over
       TLS  or DTLS you'll need to pass a combination of these either through these command line op‐
       tions or through snmp.conf configuration tokens.

       A note about <certificate-specifier>s : Net-SNMP looks for X.509 certificates in each of  the
       normal  SNMP  configuration  directory  search paths under a "tls" subdirectory.  IE, it will
       look in ~/.snmp/tls and in /usr/local/share/snmp/tls for certificates.  The certificate  com‐
       ponents  (eg,  the  public  and private halves) are stored in sub-directories underneath this
       root set of directories.  See the net-snmp-cert tool for help in importing, creating and man‐
       aging  Net-SNMP certificates.  <certificate-specifier>s can reference either a fingerprint of
       the certificate to use (the net-snmp-cert tool can help you figure out the  certificates)  or
       the  filename's  prefix  can be used.  For example, if you had a "snmpd.crt" certificate file
       then you could simply refer to the certificate via the "snmpd" specifier.

       -T localCert=<certificate-specifier>
              Indicates to the transport which key should be used to initiate (D)TLS client  connec‐
              tions.  This would typically be a certificate found using the certificate fingerprint,
              the application name (eg snmpd, snmptrapd, perl, python) or genericized name "snmpapp"
              if  using  one of the generic applications (snmpget, snmpwalk, etc).  This can also be
              set using the localCert specifier in a snmp.conf configuration file.

       -T peerCert=<certificate-specifier>
              If you expect a particular certificate to be presented by the other side then you  can
              use  this  specifier  to  indicate  the certificate it should present.  If it fails to
              present the expected certificate the client will refuse to open  the  connection  (be‐
              cause  doing otherwise could lead to man-in-the-middle attacks).  This can also be set
              using the peerCert specifier in a snmp.conf configuration file.

       -T trust_cert=<certificate-specifier>
              If you have a trusted CA certificate you wish to anchor trust with, you can  use  this
              flag  to  load  a given certificate as a trust anchor.  A copy of the certificate must
              exist within the Net-SNMP certificate storage system or this must point to a  complete
              path name.  Also see the "trustCert" snmp.conf configuration token.

       -T their_hostname=<name>
              If  the  server's  presented  certificate  can be validating using a trust anchor then
              their hostname will be checked to ensure their presented hostname matches one that  is
              expected  (you  don't want to connect to goodhost.example.com and accept a certificate
              presented by badhost.example.com do you?).  This token can specify the exact host name
              expected  to  be  presented by the remote side, either in a subjectAltName field or in
              the CommonName field of the server's X.509 certificate.

SNMPv3 with USM Options
       These options are specific to using SNMPv3 with the original User-based Security Model (USM).

       -3[MmKk]  0xHEXKEY
              Sets the keys to be used for SNMPv3 transactions.  These options allow you to set  the
              master authentication and encryption keys (-3m and -3M respectively) or set the local‐
              ized authentication and encryption keys (-3k and -3K respectively).  SNMPv3  keys  can
              be  either  passed  in by hand using these flags, or by the use of keys generated from
              passwords using the -A and -X flags discussed below.  For further  details  on  SNMPv3
              and   its  usage  of  keying  information,  see  the  Net-SNMP  tutorial  web  site  (
              http://www.Net-SNMP.org/tutorial-5/commands/ ).  Overrides the defAuthMasterKey (-3m),
              defPrivMasterKey (-3M), defAuthLocalizedKey (-3k) or defPrivLocalizedKey (-3K) tokens,
              respectively, in the snmp.conf file, see snmp.conf(5).

       -a authProtocol
              Set the authentication protocol (MD5|SHA|SHA-512|SHA-384|SHA-256|SHA-224) used for au‐
              thenticated SNMPv3 messages. Overrides the defAuthType token in the snmp.conf file.

       -A authPassword
              Set  the authentication pass phrase used for authenticated SNMPv3 messages.  Overrides
              the defAuthPassphrase token in the snmp.conf file. It  is  insecure  to  specify  pass
              phrases on the command line, see snmp.conf(5).

       -e engineID
              Set the authoritative (security) engineID used for SNMPv3 REQUEST messages, given as a
              hexadecimal string (optionally prefixed by "0x").  It is typically  not  necessary  to
              specify this engine ID, as it will usually be discovered automatically.

       -E engineID
              Set  the context engineID used for SNMPv3 REQUEST messages scopedPdu, given as a hexa‐
              decimal string.  If not specified, this will default to the authoritative engineID.

       -u secName
              Set the securityName used for authenticated SNMPv3 messages.  Overrides the defSecurityName token in the snmp.conf file.

       -x privProtocol
              Set  the  privacy protocol (DES or AES) used for encrypted SNMPv3 messages.  Overrides
              the defPrivType token in the snmp.conf file. This option is only valid if the Net-SNMP
              software was build to use OpenSSL.

       -X privPassword
              Set  the  privacy  pass phrase used for encrypted SNMPv3 messages.  Overrides the defPrivPassphrase token in the snmp.conf file.  It is insecure to specify pass phrases on
              the command line, see snmp.conf(5).

       -Z boots,time
              Set  the engineBoots and engineTime used for authenticated SNMPv3 messages.  This will
              initialize the local notion of the  agents  boots/time  with  an  authenticated  value
              stored  in  the  LCD.   It is typically not necessary to specify this option, as these
              values will usually be discovered automatically.



SNMPv1 and SNMPv2c Options
       -c community
              Set the community string for SNMPv1/v2c transactions.  Overrides the defCommunity  to‐
              ken in the snmp.conf file.


AGENT SPECIFICATION
       The  string AGENT in the SYNOPSIS above specifies the remote SNMP entity with which to commu‐
       nicate.  This specification takes the form:

              [<transport-specifier>:]<transport-address>

       At its simplest, the AGENT specification may consist of a hostname, or an IPv4 address in the
       standard  "dotted  quad"  notation.   In  this  case,  communication  will be attempted using
       UDP/IPv4 to port 161 of the given host.  Otherwise, the <transport-address> part of the spec‐
       ification is parsed according to the following table:

           <transport-specifier>       <transport-address> format

           udp                         hostname[:port] or IPv4-address[:port]

           tcp                         hostname[:port] or IPv4-address[:port]

           unix                        pathname

           ipx                         [network]:node[/port]

           aal5pvc or pvc              [interface.][VPI.]VCI

           udp6 or udpv6 or udpipv6    hostname[:port] or IPv6-address:port or
                                        '['IPv6-address']'[:port]

           tcp6 or tcpv6 or tcpipv6    hostname[:port] or IPv6-address:port or
                                        '['IPv6-address']'[:port]

       Note  that <transport-specifier> strings are case-insensitive so that, for example, "tcp" and
       "TCP" are equivalent.  Here are some examples, along with their interpretation:

       hostname:161            perform query using UDP/IPv4 datagrams to hostname on port 161.   The
                               ":161"  is  redundant here since that is the default SNMP port in any
                               case.

       udp:hostname            identical to the previous specification.   The  "udp:"  is  redundant
                               here since UDP/IPv4 is the default transport.

       TCP:hostname:1161       connect  to  hostname  on  port 1161 using TCP/IPv4 and perform query
                               over that connection.  udp6:hostname:10161 perform  the  query  using
                               UDP/IPv6 datagrams to port 10161 on hostname (which will be looked up
                               as an AAAA record).

       UDP6:[fe80::2d0:b7ff:fe21:c6c0]
                               perform the query using UDP/IPv6 datagrams to  port  161  at  address
                               fe80::2d0:b7ff:fe21:c6c0.

       tcpipv6:[::1]:1611      connect  to  port 1611 on the local host (::1 in IPv6 parlance) using
                               TCP/IPv6 and perform query over that connection.

       tls:hostname:10161

       dtls:hostname:10161     Connects using SNMP over DTLS or TLS as documented by the ISMS  work‐
                               ing  group  (RFCs  not yet published as of this date).  This will re‐
                               quire (and automatically ensures) that the TSM security model  is  in
                               use.   You'll  also  need  to set up trust paths for the certificates
                               presented by the server (see above for descriptions of this).

       ssh:hostname:22         Connects using SNMP over SSH as documented by the ISMS working  group
                               (RFCs not yet published as of this date).  This will require that the
                               TSM security model is in use (--defSecurityModel=tsm).

       ipx::00D0B7AAE308       perform query using IPX datagrams to node number 00D0B7AAE308 on  the
                               default  network, and using the default IPX port of 36879 (900F hexa‐
                               decimal), as suggested in RFC 1906.

       ipx:0AE43409:00D0B721C6C0/1161
                               perform query using  IPX  datagrams  to  port  1161  on  node  number
                               00D0B721C6C0 on network number 0AE43409.

       unix:/tmp/local-agent   connect  to  the Unix domain socket /tmp/local-agent, and perform the
                               query over that connection.

       /tmp/local-agent        identical to the previous specification, since the Unix domain is the
                               default  transport iff the first character of the <transport-address>
                               is a '/'.

       alias:myname            perform a connection to the myname alias which needs to be defined in
                               the   snmp.conf   file   using   a   line   like   "   alias   myname
                               udp:127.0.0.1:9161 ".  Any type of transport definition can  be  used
                               as  the  alias  expansion parameter.  Aliases are particularly useful
                               for using repeated complex transport strings.

       AAL5PVC:100             perform the query using AAL5 PDUs sent on the permanent virtual  cir‐
                               cuit with VPI=0 and VCI=100 (decimal) on the first ATM adapter in the
                               machine.

       PVC:1.10.32             perform the query using AAL5 PDUs sent on the permanent virtual  cir‐
                               cuit  with  VPI=10  (decimal)  and VCI=32 (decimal) on the second ATM
                               adapter in the machine.  Note that "PVC" is a synonym for "AAL5PVC".

       Note that not all the transport domains listed above will always be available; for  instance,
       hosts  with no IPv6 support will not be able to use udp6 transport addresses, and attempts to
       do so will result in the error "Unknown host".  Likewise, since AAL5 PVC support is only cur‐
       rently available on Linux, it will fail with the same error on other platforms.

MIB PARSING OPTIONS
       The  Net-SNMP MIB parser mostly adheres to the Structure of Management Information (SMI).  As
       that specification has changed through time, and in recognition of the  (ahem)  diversity  in
       compliance expressed in MIB files, additional options provide more flexibility in reading MIB
       files.

       -Pc    Toggles whether ASN.1 comments should extend to  the  end  of  the  MIB  source  line.
              Strictly  speaking, a second appearance of "--" should terminate the comment, but this
              breaks some MIB files.  The default behaviour (to interpret  comments  correctly)  can
              also be set with the configuration token commentToEOL.

       -Pd    Disables  the loading of MIB object DESCRIPTIONs when parsing MIB files.  This reduces
              the amount of memory used by the running application.

       -Pe    Toggles whether to show errors encountered when parsing MIB files.  These include ref‐
              erences  to  IMPORTed modules and MIB objects that cannot be located in the MIB direc‐
              tory search list.  The default behaviour can also be set with the configuration  token
              showMibErrors.

       -PR    If  the same MIB object (parent name and sub-identifier) appears multiple times in the
              list of MIB definitions loaded, use the last version to be read in.  By  default,  the
              first  version will be used, and any duplicates discarded.  This behaviour can also be
              set with the configuration token mibReplaceWithLatest.

              Such ordering is normally only relevant if there are two MIB  files  with  conflicting
              object  definitions for the same OID (or different revisions of the same basic MIB ob‐
              ject).

       -Pu    Toggles whether to allow the underline character in MIB object names  and  other  sym‐
              bols.   Strictly speaking, this is not valid SMI syntax, but some vendor MIB files de‐
              fine such names.  The default behaviour can also be set with the  configuration  token
              mibAllowUnderline.

       -Pw    Show  various warning messages in parsing MIB files and building the overall OID tree.
              This can also be set with the configuration directive mibWarningLevel 1

       -PW    Show some additional warning messages, mostly relating to parsing individual  MIB  ob‐
              jects.  This can also be set with the configuration directive mibWarningLevel 2


OUTPUT OPTIONS
       The format of the output from SNMP commands can be controlled using various parameters of the
       -O flag.  The effects of these sub-options can be seen by comparison with the  following  de‐
       fault output (unless otherwise specified):
              $ snmpget -c public -v 1 localhost sysUpTime.0
              SNMPv2-MIB::sysUpTime.0 = Timeticks: (14096763) 1 day, 15:09:27.63


       -Oa    Display string values as ASCII strings (unless there is a DISPLAY-HINT defined for the
              corresponding MIB object).  By default, the library attempts to determine whether  the
              value is a printable or binary string, and displays it accordingly.

              This option does not affect objects that do have a Display Hint.

       -Ob    Display  table  indexes  numerically,  rather  than  trying  to interpret the instance
              subidentifiers as string or OID values:
                  $ snmpgetnext -c public -v 1 localhost vacmSecurityModel
                  SNMP-VIEW-BASED-ACM-MIB::vacmSecurityModel.0."wes" = xxx
                  $ snmpgetnext -c public -v 1 -Ob localhost vacmSecurityModel
                  SNMP-VIEW-BASED-ACM-MIB::vacmSecurityModel.0.3.119.101.115 = xxx

       -Oe    Removes the symbolic labels from enumeration values:
                  $ snmpget -c public -v 1 localhost ipForwarding.0
                  IP-MIB::ipForwarding.0 = INTEGER: forwarding(1)
                  $ snmpget -c public -v 1 -Oe localhost ipForwarding.0
                  IP-MIB::ipForwarding.0 = INTEGER: 1

       -OE    Modifies index strings to escape the quote characters:
                  $ snmpgetnext -c public -v 1 localhost vacmSecurityModel
                  SNMP-VIEW-BASED-ACM-MIB::vacmSecurityModel.0."wes" = xxx
                  $ snmpgetnext -c public -v 1 -OE localhost vacmSecurityModel
                  SNMP-VIEW-BASED-ACM-MIB::vacmSecurityModel.0.\"wes\" = xxx

              This allows the output to be reused in shell commands.

       -Of    Include the full list of MIB objects when displaying an OID:
                  .iso.org.dod.internet.mgmt.mib-2.system.sysUpTime.0 =
                             Timeticks: (14096763) 1 day, 15:09:27.63

       -On    Displays the OID numerically:
                  .1.3.6.1.2.1.1.3.0 = Timeticks: (14096763) 1 day, 15:09:27.63

       -Op PRECISION
              Uses the PRECISION string to allow modification of the value output format.   This  is
              used with OPAQUE float/double at the moment, but might be usabe for other types in the
              future. Allowed PRECISION strings are compatible to the flag/field with/precision part
              of the printf(3) function:
                  $ snmpget localhost outputVoltage.1
                  WIENER-CRATE-MIB::outputVoltage.u0 = Opaque: Float: 0.000000 V
                  $ snmpget -Op +020.12 localhost outputVoltage.1
                  WIENER-CRATE-MIB::outputVoltage.u0 = Opaque: Float: +000000.000000000000 V

       -Oq    Removes the equal sign and type information when displaying varbind values:
                  SNMPv2-MIB::sysUpTime.0 1:15:09:27.63

       -OQ    Removes the type information when displaying varbind values:
                  SNMPv2-MIB::sysUpTime.0 = 1:15:09:27.63

       -Os    Display the MIB object name (plus any instance or other subidentifiers):
                  sysUpTime.0 = Timeticks: (14096763) 1 day, 15:09:27.63

       -OS    Display the name of the MIB, as well as the object name:
                  SNMPv2-MIB::sysUpTime.0 = Timeticks: (14096763) 1 day, 15:09:27.63

              This is the default OID output format.

       -Ot    Display TimeTicks values as raw numbers:
                  SNMPv2-MIB::sysUpTime.0 = 14096763

       -OT    If values are printed as Hex strings, display a printable version as well.

       -Ou    Display  the  OID in the traditional UCD-style (inherited from the original CMU code).
              That means removing a series of "standard" prefixes from the OID, and  displaying  the
              remaining list of MIB object names (plus any other subidentifiers):
                  system.sysUpTime.0 = Timeticks: (14096763) 1 day, 15:09:27.63

       -OU    Do not print the UNITS suffix at the end of the value.

       -Ov    Display the varbind value only, not the OID:
                  $ snmpget -c public -v 1 -Ov localhost ipForwarding.0
                  INTEGER: forwarding(1)

       -Ox    Display  string  values as Hex strings (unless there is a DISPLAY-HINT defined for the
              corresponding MIB object).  By default, the library attempts to determine whether  the
              value is a printable or binary string, and displays it accordingly.

              This option does not affect objects that do have a Display Hint.

       -OX    Display  table indexes in a more "program like" output, imitating a traditional array-
              style index format:
                  $ snmpgetnext -c public -v 1 localhost ipv6RouteTable
                  IPv6-MIB::ipv6RouteIfIndex.63.254.1.0.255.0.0.0.0.0.0.0.0.0.0.0.64.1 = INTEGER: 2
                  $ snmpgetnext -c public -v 1 -OX localhost ipv6RouteTable
                  IPv6-MIB::ipv6RouteIfIndex[3ffe:100:ff00:0:0:0:0:0][64][1] = INTEGER: 2

       Most of these options can also be configured via configuration tokens.  See the  snmp.conf(5)
       manual page for details.


LOGGING OPTIONS
       The  mechanism  and  destination to use for logging of warning and error messages can be con‐
       trolled by passing various parameters to the -L flag.

       -Ln    Disable all logging.

       -Le    Log messages to the standard error stream.

       -Lf FILE
              Log messages to the specified file.

       -Lo    Log messages to the standard output stream.

       -Ls FACILITY
              Log messages via syslog, using the specified facility ('d'  for  LOG_DAEMON,  'u'  for
              LOG_USER, or '0'-'7' for LOG_LOCAL0 through LOG_LOCAL7).

       There  are also "upper case" versions of each of these options, which allow the corresponding
       logging mechanism to be restricted to certain priorities of message.   Using  standard  error
       logging as an example:

       -LE pri
              will log messages of priority 'pri' and above to standard error.  See below for possi‐
              ble 'pri' values-

       -LE pri1-pri2
              will log messages with priority between 'pri1' and 'pri2' (inclusive) to standard  er‐
              ror.

       For -LF and -LS the priority specification comes before the file or facility token.

       The priorities recognised are:

              0 or !  for LOG_EMERG,
              1 or a for LOG_ALERT,
              2 or c for LOG_CRIT,
              3 or e for LOG_ERR,
              4 or w for LOG_WARNING,
              5 or n for LOG_NOTICE,
              6 or i for LOG_INFO, and
              7 or d for LOG_DEBUG.

       Normal output is (or will be!) logged at a priority level of LOG_NOTICE


INPUT OPTIONS
       The  interpretation of input object names and the values to be assigned can be controlled us‐
       ing various parameters of the -I flag.  The default behaviour will be described at the end of
       this section.

       -Ib    specifies  that  the  given  name should be regarded as a regular expression, to match
              (case-insensitively) against object names in the MIB tree.  The "best" match  will  be
              used  -  calculated  as  the one that matches the closest to the beginning of the node
              name and the highest in the tree.  For example, the MIB object vacmSecurityModel could
              be  matched  by  the  expression vacmsecuritymodel (full name, but different case), or
              vacm.*model (regexp pattern).

              Note that '.' is a special character in regular expression patterns, so the expression
              cannot  specify  instance subidentifiers or more than one object name.  A "best match"
              expression will only be applied against single MIB object names.  For example, the ex‐
              pression  sys*ontact.0  would not match the instance sysContact.0 (although sys*ontact
              would match sysContact).  Similarly, specifying a MIB module name will not succeed (so
              SNMPv2-MIB::sys.*ontact would not match either).

       -Ih    disables  the  use of DISPLAY-HINT information when assigning values.  This would then
              require providing the raw value:
                  snmpset ... HOST-RESOURCES-MIB::hrSystemDate.0
                                  x "07 D2 0C 0A 02 04 06 08"
              instead of a formatted version:
                  snmpset ... HOST-RESOURCES-MIB::hrSystemDate.0
                                  = 2002-12-10,2:4:6.8

       -Ir    disables checking table indexes and the value to be assigned against the relevant  MIB
              definitions.   This  will  (hopefully) result in the remote agent reporting an invalid
              request, rather than checking (and rejecting) this before it is  sent  to  the  remote
              agent.

              Local  checks  are  more  efficient (and the diagnostics provided also tend to be more
              precise), but disabling this behaviour is particularly useful when testing the  remote
              agent.

       -IR    enables "random access" lookup of MIB names.  Rather than providing a full OID path to
              the desired MIB object (or qualifying this object with an explicit MIB  module  name),
              the  MIB tree will be searched for the matching object name.  Thus .iso.org.dod.inter‐
              net.mib-2.system.sysDescr.0 (or SNMPv2-MIB::sysDescr.0) can  be  specified  simply  as
              sysDescr.0.

              Warning:
                     Since MIB object names are not globally unique, this approach may return a dif‐
                     ferent MIB object depending on which MIB files have been loaded.

              The MIB-MODULE::objectName syntax has the advantage of uniquely identifying a particu‐
              lar  MIB  object,  as well as being slightly more efficient (and automatically loading
              the necessary MIB file if necessary).

       -Is SUFFIX
              adds the specified suffix to each textual OID given on the command line.  This can  be
              used to retrieve multiple objects from the same row of a table, by specifying a common
              index value.

       -IS PREFIX
              adds the specified prefix to each textual OID given on the command line.  This can  be
              used  to  specify  an explicit MIB module name for all objects being retrieved (or for
              incurably lazy typists).

       -Iu    enables the traditional UCD-style approach to interpreting input OIDs.   This  assumes
              that  OIDs  are rooted at the 'mib-2' point in the tree (unless they start with an ex‐
              plicit '.' or include a MIB module name).  So the sysDescr  instance  above  would  be
              referenced as system.sysDescr.0.


       Object  names  specified with a leading '.' are always interpreted as "fully qualified" OIDs,
       listing the sequence of MIB objects from the root of the MIB tree.  Such  objects  and  those
       qualified by an explicit MIB module name are unaffected by the -Ib, -IR and -Iu flags.

       Otherwise,  if  none  of  the  above input options are specified, the default behaviour for a
       "relative" OID is to try and interpret it as an (implicitly) fully qualified OID, then  apply
       "random access" lookup (-IR), followed by "best match" pattern matching (-Ib).


ENVIRONMENT VARIABLES
       PREFIX The standard prefix for object identifiers (when using UCD-style output).  Defaults to
              .iso.org.dod.internet.mgmt.mib-2

       MIBS   The list of MIBs to load. Defaults to SNMPv2-TC:SNMPv2-MIB:IF-MIB:IP-MIB:TCP-MIB:
              UDP-MIB:SNMP-VACM-MIB.
              Overridden by the -m option.

       MIBDIRS
              The  list  of directories to search for MIBs. Defaults to /usr/share/snmp/mibs.  Over‐
              ridden by the -M option.


FILES
       /etc/snmp/snmpd.conf
              Agent configuration file. See snmpd.conf(5).

       /etc/snmp/snmp.conf

       ~/.snmp/snmp.conf
              Application configuration files. See snmp.conf(5).


SEE ALSO
       snmpget(1), snmpgetnext(1), snmpset(1), snmpbulkget(1), snmpbulkwalk(1), snmpwalk(1),  snmpt‐
       able(1), snmpnetstat(1), snmpdelta(1), snmptrap(1), snmpinform(1), snmpusm(1), snmpstatus(1),
       snmptest(1), snmp.conf(5).




V5.9.1                                       20 Jul 2010                                  SNMPCMD(1)
SNMPCMD(1)
NAME SYNOPSIS DESCRIPTION COMMAND-LINE CONFIG OPTIONS
Generic Options -d Dump (in hexadecimal) the raw SNMP packets sent and received. -D[TOKEN[,...]] -h, --help -H Display a list of configuration file directives understood by the command and then -I [brRhu] -L [eEfFoOsS] -m MIBLIST -M DIRLIST -v 1 | 2c | 3 -P [cdeRuwW] -r retries -t timeout -V, --version -Yname="value" SNMPv3 Options -l secLevel -n contextName SNMPv3 over TLS Options -T localCert= -T peerCert= -T trust_cert= -T their_hostname= SNMPv3 with USM Options -3[MmKk] 0xHEXKEY -a authProtocol -A authPassword -e engineID -E engineID -u secName -x privProtocol -X privPassword -Z boots,time SNMPv1 and SNMPv2c Options -c community
AGENT SPECIFICATION MIB PARSING OPTIONS
-Pc Toggles whether ASN.1 comments should extend to the end of the MIB source line. -Pd Disables the loading of MIB object DESCRIPTIONs when parsing MIB files. This reduces -Pe Toggles whether to show errors encountered when parsing MIB files. These include ref‐ -PR If the same MIB object (parent name and sub-identifier) appears multiple times in the -Pu Toggles whether to allow the underline character in MIB object names and other sym‐ -Pw Show various warning messages in parsing MIB files and building the overall OID tree. -PW Show some additional warning messages, mostly relating to parsing individual MIB ob‐
OUTPUT OPTIONS
-O flag. The effects of these sub-options can be seen by comparison with the following de‐ -Oa Display string values as ASCII strings (unless there is a DISPLAY-HINT defined for the -Ob Display table indexes numerically, rather than trying to interpret the instance -Oe Removes the symbolic labels from enumeration values: -OE Modifies index strings to escape the quote characters: -Of Include the full list of MIB objects when displaying an OID: -On Displays the OID numerically: -Op PRECISION -Oq Removes the equal sign and type information when displaying varbind values: -OQ Removes the type information when displaying varbind values: -Os Display the MIB object name (plus any instance or other subidentifiers): -OS Display the name of the MIB, as well as the object name: -Ot Display TimeTicks values as raw numbers: -OT If values are printed as Hex strings, display a printable version as well. -Ou Display the OID in the traditional UCD-style (inherited from the original CMU code). -OU Do not print the UNITS suffix at the end of the value. -Ov Display the varbind value only, not the OID: -Ox Display string values as Hex strings (unless there is a DISPLAY-HINT defined for the -OX Display table indexes in a more "program like" output, imitating a traditional array-
LOGGING OPTIONS
-Ln Disable all logging. -Le Log messages to the standard error stream. -Lf FILE -Lo Log messages to the standard output stream. -Ls FACILITY -LE pri -LE pri1-pri2
INPUT OPTIONS
-Ib specifies that the given name should be regarded as a regular expression, to match -Ih disables the use of DISPLAY-HINT information when assigning values. This would then -Ir disables checking table indexes and the value to be assigned against the relevant MIB -IR enables "random access" lookup of MIB names. Rather than providing a full OID path to -Is SUFFIX -IS PREFIX -Iu enables the traditional UCD-style approach to interpreting input OIDs. This assumes
ENVIRONMENT VARIABLES FILES SEE ALSO

Generated by phpman local Author: Che Dong Under GNU General Public License
2026-06-15 07:33 @216.73.216.200
CrawledBy Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Valid XHTML 1.0 TransitionalValid CSS!

^_back to top