man > snmpcmd(1)

SNMPCMD(1)                                    Net-SNMP                                    SNMPCMD(1)

NAME
       snmpcmd - options and behaviour common to most of the Net-SNMP command-line tools

SYNOPSIS
       snmpcmd [OPTIONS] AGENT [PARAMETERS]

DESCRIPTION
       This  manual  page describes the common options for the SNMP commands: snmpbulkget, snmpbulk‐
       walk, snmpdelta, snmpget, snmpgetnext, snmpnetstat, snmpset, snmpstatus, snmptable, snmptest,
       snmptrap,  snmpdf, snmpusm , snmpwalk .  The command line applications use the SNMP  protocol
       to  communicate with an SNMP capable network entity, an agent.  Individual applications typi‐
       cally (but not necessarily) take additional parameters that are given after the agent  speci‐
       fication.  These parameters are documented in the manual pages for each application.

COMMAND-LINE CONFIG OPTIONS
       In  addition to the options described in this manual page, all of the tokens described in the
       snmp.conf and other .conf manual pages can be used on the command line of  Net-SNMP  applica‐
       tions  as  well by prefixing them with "--".  EG, specifying --dontLoadHostConfig=true on the
       command line will turn off loading of the host specific configuration files.

       The snmp.conf file settings and the double-dash arguments  over-ride  the  single-dash  argu‐
       ments.   So  it's  important to note that if single-dash arguments aren't working because you
       have settings in the snmp.conf file that conflict with them  then  you'll  need  to  use  the
       longer-form double-dash arguments to successfully trump the snmp.conf file settings.

Generic Options
       These options control how the Net-SNMP commands behave regardless of what version of SNMP you
       are  using.   See  further below for options that control specific versions or sub-modules of
       the SNMP protocol.

       -d     Dump (in hexadecimal) the raw SNMP packets sent and received.

       -D[TOKEN[,...]]
              Turn on debugging output for the given TOKEN(s).  Try ALL for extremely  verbose  out‐
              put.

       -h, --help
              Display a brief usage message and then exit.

       -H     Display  a  list  of  configuration file directives understood by the command and then
              exit.

       -I [brRhu]
              Specifies input parsing options. See INPUT OPTIONS below.

       -L [eEfFoOsS]
              Specifies output logging options. See LOGGING OPTIONS below.

       -m MIBLIST
              Specifies a colon separated list of MIB modules (not files) to load for this  applica‐
              tion.   This  overrides (or augments) the environment variable MIBS, the snmp.conf di‐
              rective mibs, and the list of MIBs hardcoded into the Net-SNMP library.

              If MIBLIST has a leading '-' or '+' character, then the MIB modules listed are  loaded
              in  addition to the default list, coming before or after this list respectively.  Oth‐
              erwise, the specified MIBs are loaded instead of this default list.

              The special keyword ALL is used to load all MIB modules in the  MIB  directory  search
              list.   Every  file  whose name does not begin with "." will be parsed as if it were a
              MIB file.

       -M DIRLIST
              Specifies a colon separated list of directories to search for  MIBs.   This  overrides
              (or  augments)  the environment variable MIBDIRS, the snmp.conf directive mibdirs, and
              the default directory hardcoded into the Net-SNMP library (/usr/share/snmp/mibs).

              If DIRLIST has a leading '-' or '+' character, then the given directories are added to
              the default list, being searched before or after the directories on this list  respec‐
              tively.   Otherwise,  the  specified  directories are searched instead of this default
              list.

              Note that the directories appearing later in the list have have precedence  over  ear‐
              lier  ones.  To avoid searching any MIB directories, set the MIBDIRS environment vari‐
              able to the empty string ("").

              Note that MIBs specified using the -m option or the mibs configuration directive  will
              be  loaded  from one of the directories listed by the -M option (or equivalents).  The
              mibfile directive takes a full path to the specified MIB file, so this does  not  need
              to be in the MIB directory search list.

       -v 1 | 2c | 3
              Specifies  the  protocol version to use: 1 (RFCs 1155-1157), 2c (RFCs 1901-1908), or 3
              (RFCs 2571-2574).  The default is typically version 3.  Overrides the defVersion token
              in the snmp.conf file.  -O [abeEfnqQsStTuUvxX] Specifies output printing options.  See
              OUTPUT OPTIONS below.

       -P [cdeRuwW]
              Specifies MIB parsing options.  See MIB PARSING OPTIONS below.

       -r retries
              Specifies the number of retries to be used in the requests. The default is 5.

       -t timeout
              Specifies  the  timeout  in seconds between retries. The default is 1.  Floating point
              numbers can be used to specify fractions of seconds.

       -V, --version
              Display version information for the application and then exit.

       -Yname="value"

       --name="value"
              Allows one to specify any token ("name") supported in the snmp.conf file and sets  its
              value  to  "value".  Overrides  the  corresponding  token  in  the snmp.conf file. See
              snmp.conf(5) for the full list of tokens.



SNMPv3 Options
       The following options are generic to all forms of SNMPv3,  regardless  of  whether  it's  the
       original SNMPv3 with USM or the newer SNMPv3 over (D)TLS support.


       -l secLevel
              Set  the  securityLevel  used  for SNMPv3 messages (noAuthNoPriv|authNoPriv|authPriv).
              Appropriate pass phrase(s) must provided when using any level  higher  than  noAuthNo‐
              Priv.  Overrides the defSecurityLevel token in the snmp.conf file.

       -n contextName
              Set  the  contextName  used for SNMPv3 messages.  The default contextName is the empty
              string "".  Overrides the defContext token in the snmp.conf file.


SNMPv3 over TLS Options
       These options pass transport-specific parameters to the TLS layer.  If you're using SNMP over
       TLS or DTLS you'll need to pass a combination of these either through these command line  op‐
       tions or through snmp.conf configuration tokens.

       A  note about <certificate-specifier>s : Net-SNMP looks for X.509 certificates in each of the
       normal SNMP configuration directory search paths under a "tls"  subdirectory.   IE,  it  will
       look  in ~/.snmp/tls and in /usr/local/share/snmp/tls for certificates.  The certificate com‐
       ponents (eg, the public and private halves) are stored  in  sub-directories  underneath  this
       root set of directories.  See the net-snmp-cert tool for help in importing, creating and man‐
       aging  Net-SNMP certificates.  <certificate-specifier>s can reference either a fingerprint of
       the certificate to use (the net-snmp-cert tool can help you figure out the  certificates)  or
       the  filename's  prefix  can be used.  For example, if you had a "snmpd.crt" certificate file
       then you could simply refer to the certificate via the "snmpd" specifier.

       -T localCert=<certificate-specifier>
              Indicates to the transport which key should be used to initiate (D)TLS client  connec‐
              tions.  This would typically be a certificate found using the certificate fingerprint,
              the application name (eg snmpd, snmptrapd, perl, python) or genericized name "snmpapp"
              if  using  one of the generic applications (snmpget, snmpwalk, etc).  This can also be
              set using the localCert specifier in a snmp.conf configuration file.

       -T peerCert=<certificate-specifier>
              If you expect a particular certificate to be presented by the other side then you  can
              use  this  specifier  to  indicate  the certificate it should present.  If it fails to
              present the expected certificate the client will refuse to open  the  connection  (be‐
              cause  doing otherwise could lead to man-in-the-middle attacks).  This can also be set
              using the peerCert specifier in a snmp.conf configuration file.

       -T trust_cert=<certificate-specifier>
              If you have a trusted CA certificate you wish to anchor trust with, you can  use  this
              flag  to  load  a given certificate as a trust anchor.  A copy of the certificate must
              exist within the Net-SNMP certificate storage system or this must point to a  complete
              path name.  Also see the "trustCert" snmp.conf configuration token.

       -T their_hostname=<name>
              If  the  server's  presented  certificate  can be validating using a trust anchor then
              their hostname will be checked to ensure their presented hostname matches one that  is
              expected  (you  don't want to connect to goodhost.example.com and accept a certificate
              presented by badhost.example.com do you?).  This token can specify the exact host name
              expected to be presented by the remote side, either in a subjectAltName  field  or  in
              the CommonName field of the server's X.509 certificate.

SNMPv3 with USM Options
       These options are specific to using SNMPv3 with the original User-based Security Model (USM).

       -3[MmKk]  0xHEXKEY
              Sets  the keys to be used for SNMPv3 transactions.  These options allow you to set the
              master authentication and encryption keys (-3m and -3M respectively) or set the local‐
              ized authentication and encryption keys (-3k and -3K respectively).  SNMPv3  keys  can
              be  either  passed  in by hand using these flags, or by the use of keys generated from
              passwords using the -A and -X flags discussed below.  For further  details  on  SNMPv3
              and   its  usage  of  keying  information,  see  the  Net-SNMP  tutorial  web  site  (
              http://www.Net-SNMP.org/tutorial-5/commands/ ).  Overrides the defAuthMasterKey (-3m),
              defPrivMasterKey (-3M), defAuthLocalizedKey (-3k) or defPrivLocalizedKey (-3K) tokens,
              respectively, in the snmp.conf file, see snmp.conf(5).

       -a authProtocol
              Set the authentication protocol (MD5|SHA|SHA-512|SHA-384|SHA-256|SHA-224) used for au‐
              thenticated SNMPv3 messages. Overrides the defAuthType token in the snmp.conf file.

       -A authPassword
              Set the authentication pass phrase used for authenticated SNMPv3 messages.   Overrides
              the  defAuthPassphrase  token  in  the  snmp.conf file. It is insecure to specify pass
              phrases on the command line, see snmp.conf(5).

       -e engineID
              Set the authoritative (security) engineID used for SNMPv3 REQUEST messages, given as a
              hexadecimal string (optionally prefixed by "0x").  It is typically  not  necessary  to
              specify this engine ID, as it will usually be discovered automatically.

       -E engineID
              Set  the context engineID used for SNMPv3 REQUEST messages scopedPdu, given as a hexa‐
              decimal string.  If not specified, this will default to the authoritative engineID.

       -u secName
              Set the securityName used for authenticated SNMPv3 messages.  Overrides the defSecuri‐
              tyName token in the snmp.conf file.

       -x privProtocol
              Set the privacy protocol (DES or AES) used for encrypted SNMPv3  messages.   Overrides
              the defPrivType token in the snmp.conf file. This option is only valid if the Net-SNMP
              software was build to use OpenSSL.

       -X privPassword
              Set  the  privacy  pass phrase used for encrypted SNMPv3 messages.  Overrides the def‐
              PrivPassphrase token in the snmp.conf file.  It is insecure to specify pass phrases on
              the command line, see snmp.conf(5).

       -Z boots,time
              Set the engineBoots and engineTime used for authenticated SNMPv3 messages.  This  will
              initialize  the  local  notion  of  the  agents boots/time with an authenticated value
              stored in the LCD.  It is typically not necessary to specify  this  option,  as  these
              values will usually be discovered automatically.



SNMPv1 and SNMPv2c Options
       -c community
              Set  the community string for SNMPv1/v2c transactions.  Overrides the defCommunity to‐
              ken in the snmp.conf file.


AGENT SPECIFICATION
       The string AGENT in the SYNOPSIS above specifies the remote SNMP entity with which to  commu‐
       nicate.  This specification takes the form:

              [<transport-specifier>:]<transport-address>

       At its simplest, the AGENT specification may consist of a hostname, or an IPv4 address in the
       standard  "dotted  quad"  notation.   In  this  case,  communication  will be attempted using
       UDP/IPv4 to port 161 of the given host.  Otherwise, the <transport-address> part of the spec‐
       ification is parsed according to the following table:

           <transport-specifier>       <transport-address> format

           udp                         hostname[:port] or IPv4-address[:port]

           tcp                         hostname[:port] or IPv4-address[:port]

           unix                        pathname

           ipx                         [network]:node[/port]

           aal5pvc or pvc              [interface.][VPI.]VCI

           udp6 or udpv6 or udpipv6    hostname[:port] or IPv6-address:port or
                                        '['IPv6-address']'[:port]

           tcp6 or tcpv6 or tcpipv6    hostname[:port] or IPv6-address:port or
                                        '['IPv6-address']'[:port]

       Note that <transport-specifier> strings are case-insensitive so that, for example, "tcp"  and
       "TCP" are equivalent.  Here are some examples, along with their interpretation:

       hostname:161            perform  query using UDP/IPv4 datagrams to hostname on port 161.  The
                               ":161" is redundant here since that is the default SNMP port  in  any
                               case.

       udp:hostname            identical  to  the  previous  specification.  The "udp:" is redundant
                               here since UDP/IPv4 is the default transport.

       TCP:hostname:1161       connect to hostname on port 1161 using  TCP/IPv4  and  perform  query
                               over  that  connection.   udp6:hostname:10161 perform the query using
                               UDP/IPv6 datagrams to port 10161 on hostname (which will be looked up
                               as an AAAA record).

       UDP6:[fe80::2d0:b7ff:fe21:c6c0]
                               perform the query using UDP/IPv6 datagrams to  port  161  at  address
                               fe80::2d0:b7ff:fe21:c6c0.

       tcpipv6:[::1]:1611      connect  to  port 1611 on the local host (::1 in IPv6 parlance) using
                               TCP/IPv6 and perform query over that connection.

       tls:hostname:10161

       dtls:hostname:10161     Connects using SNMP over DTLS or TLS as documented by the ISMS  work‐
                               ing  group  (RFCs  not yet published as of this date).  This will re‐
                               quire (and automatically ensures) that the TSM security model  is  in
                               use.   You'll  also  need  to set up trust paths for the certificates
                               presented by the server (see above for descriptions of this).

       ssh:hostname:22         Connects using SNMP over SSH as documented by the ISMS working  group
                               (RFCs not yet published as of this date).  This will require that the
                               TSM security model is in use (--defSecurityModel=tsm).

       ipx::00D0B7AAE308       perform  query using IPX datagrams to node number 00D0B7AAE308 on the
                               default network, and using the default IPX port of 36879 (900F  hexa‐
                               decimal), as suggested in RFC 1906.

       ipx:0AE43409:00D0B721C6C0/1161
                               perform  query  using  IPX  datagrams  to  port  1161  on node number
                               00D0B721C6C0 on network number 0AE43409.

       unix:/tmp/local-agent   connect to the Unix domain socket /tmp/local-agent, and  perform  the
                               query over that connection.

       /tmp/local-agent        identical to the previous specification, since the Unix domain is the
                               default  transport iff the first character of the <transport-address>
                               is a '/'.

       alias:myname            perform a connection to the myname alias which needs to be defined in
                               the   snmp.conf   file   using   a   line   like   "   alias   myname
                               udp:127.0.0.1:9161  ".   Any type of transport definition can be used
                               as the alias expansion parameter.  Aliases  are  particularly  useful
                               for using repeated complex transport strings.

       AAL5PVC:100             perform  the query using AAL5 PDUs sent on the permanent virtual cir‐
                               cuit with VPI=0 and VCI=100 (decimal) on the first ATM adapter in the
                               machine.

       PVC:1.10.32             perform the query using AAL5 PDUs sent on the permanent virtual  cir‐
                               cuit  with  VPI=10  (decimal)  and VCI=32 (decimal) on the second ATM
                               adapter in the machine.  Note that "PVC" is a synonym for "AAL5PVC".

       Note that not all the transport domains listed above will always be available; for  instance,
       hosts  with no IPv6 support will not be able to use udp6 transport addresses, and attempts to
       do so will result in the error "Unknown host".  Likewise, since AAL5 PVC support is only cur‐
       rently available on Linux, it will fail with the same error on other platforms.

MIB PARSING OPTIONS
       The Net-SNMP MIB parser mostly adheres to the Structure of Management Information (SMI).   As
       that  specification  has  changed through time, and in recognition of the (ahem) diversity in
       compliance expressed in MIB files, additional options provide more flexibility in reading MIB
       files.

       -Pc    Toggles whether ASN.1 comments should extend to  the  end  of  the  MIB  source  line.
              Strictly  speaking, a second appearance of "--" should terminate the comment, but this
              breaks some MIB files.  The default behaviour (to interpret  comments  correctly)  can
              also be set with the configuration token commentToEOL.

       -Pd    Disables  the loading of MIB object DESCRIPTIONs when parsing MIB files.  This reduces
              the amount of memory used by the running application.

       -Pe    Toggles whether to show errors encountered when parsing MIB files.  These include ref‐
              erences to IMPORTed modules and MIB objects that cannot be located in the  MIB  direc‐
              tory  search list.  The default behaviour can also be set with the configuration token
              showMibErrors.

       -PR    If the same MIB object (parent name and sub-identifier) appears multiple times in  the
              list  of  MIB definitions loaded, use the last version to be read in.  By default, the
              first version will be used, and any duplicates discarded.  This behaviour can also  be
              set with the configuration token mibReplaceWithLatest.

              Such  ordering  is  normally only relevant if there are two MIB files with conflicting
              object definitions for the same OID (or different revisions of the same basic MIB  ob‐
              ject).

       -Pu    Toggles  whether  to  allow the underline character in MIB object names and other sym‐
              bols.  Strictly speaking, this is not valid SMI syntax, but some vendor MIB files  de‐
              fine  such  names.  The default behaviour can also be set with the configuration token
              mibAllowUnderline.

       -Pw    Show various warning messages in parsing MIB files and building the overall OID  tree.
              This can also be set with the configuration directive mibWarningLevel 1

       -PW    Show  some  additional warning messages, mostly relating to parsing individual MIB ob‐
              jects.  This can also be set with the configuration directive mibWarningLevel 2


OUTPUT OPTIONS
       The format of the output from SNMP commands can be controlled using various parameters of the
       -O flag.  The effects of these sub-options can be seen by comparison with the  following  de‐
       fault output (unless otherwise specified):
              $ snmpget -c public -v 1 localhost sysUpTime.0
              SNMPv2-MIB::sysUpTime.0 = Timeticks: (14096763) 1 day, 15:09:27.63


       -Oa    Display string values as ASCII strings (unless there is a DISPLAY-HINT defined for the
              corresponding  MIB object).  By default, the library attempts to determine whether the
              value is a printable or binary string, and displays it accordingly.

              This option does not affect objects that do have a Display Hint.

       -Ob    Display table indexes numerically,  rather  than  trying  to  interpret  the  instance
              subidentifiers as string or OID values:
                  $ snmpgetnext -c public -v 1 localhost vacmSecurityModel
                  SNMP-VIEW-BASED-ACM-MIB::vacmSecurityModel.0."wes" = xxx
                  $ snmpgetnext -c public -v 1 -Ob localhost vacmSecurityModel
                  SNMP-VIEW-BASED-ACM-MIB::vacmSecurityModel.0.3.119.101.115 = xxx

       -Oe    Removes the symbolic labels from enumeration values:
                  $ snmpget -c public -v 1 localhost ipForwarding.0
                  IP-MIB::ipForwarding.0 = INTEGER: forwarding(1)
                  $ snmpget -c public -v 1 -Oe localhost ipForwarding.0
                  IP-MIB::ipForwarding.0 = INTEGER: 1

       -OE    Modifies index strings to escape the quote characters:
                  $ snmpgetnext -c public -v 1 localhost vacmSecurityModel
                  SNMP-VIEW-BASED-ACM-MIB::vacmSecurityModel.0."wes" = xxx
                  $ snmpgetnext -c public -v 1 -OE localhost vacmSecurityModel
                  SNMP-VIEW-BASED-ACM-MIB::vacmSecurityModel.0.\"wes\" = xxx

              This allows the output to be reused in shell commands.

       -Of    Include the full list of MIB objects when displaying an OID:
                  .iso.org.dod.internet.mgmt.mib-2.system.sysUpTime.0 =
                             Timeticks: (14096763) 1 day, 15:09:27.63

       -On    Displays the OID numerically:
                  .1.3.6.1.2.1.1.3.0 = Timeticks: (14096763) 1 day, 15:09:27.63

       -Op PRECISION
              Uses  the  PRECISION string to allow modification of the value output format.  This is
              used with OPAQUE float/double at the moment, but might be usabe for other types in the
              future. Allowed PRECISION strings are compatible to the flag/field with/precision part
              of the printf(3) function:
                  $ snmpget localhost outputVoltage.1
                  WIENER-CRATE-MIB::outputVoltage.u0 = Opaque: Float: 0.000000 V
                  $ snmpget -Op +020.12 localhost outputVoltage.1
                  WIENER-CRATE-MIB::outputVoltage.u0 = Opaque: Float: +000000.000000000000 V

       -Oq    Removes the equal sign and type information when displaying varbind values:
                  SNMPv2-MIB::sysUpTime.0 1:15:09:27.63

       -OQ    Removes the type information when displaying varbind values:
                  SNMPv2-MIB::sysUpTime.0 = 1:15:09:27.63

       -Os    Display the MIB object name (plus any instance or other subidentifiers):
                  sysUpTime.0 = Timeticks: (14096763) 1 day, 15:09:27.63

       -OS    Display the name of the MIB, as well as the object name:
                  SNMPv2-MIB::sysUpTime.0 = Timeticks: (14096763) 1 day, 15:09:27.63

              This is the default OID output format.

       -Ot    Display TimeTicks values as raw numbers:
                  SNMPv2-MIB::sysUpTime.0 = 14096763

       -OT    If values are printed as Hex strings, display a printable version as well.

       -Ou    Display the OID in the traditional UCD-style (inherited from the original  CMU  code).
              That  means  removing a series of "standard" prefixes from the OID, and displaying the
              remaining list of MIB object names (plus any other subidentifiers):
                  system.sysUpTime.0 = Timeticks: (14096763) 1 day, 15:09:27.63

       -OU    Do not print the UNITS suffix at the end of the value.

       -Ov    Display the varbind value only, not the OID:
                  $ snmpget -c public -v 1 -Ov localhost ipForwarding.0
                  INTEGER: forwarding(1)

       -Ox    Display string values as Hex strings (unless there is a DISPLAY-HINT defined  for  the
              corresponding  MIB object).  By default, the library attempts to determine whether the
              value is a printable or binary string, and displays it accordingly.

              This option does not affect objects that do have a Display Hint.

       -OX    Display table indexes in a more "program like" output, imitating a traditional  array-
              style index format:
                  $ snmpgetnext -c public -v 1 localhost ipv6RouteTable
                  IPv6-MIB::ipv6RouteIfIndex.63.254.1.0.255.0.0.0.0.0.0.0.0.0.0.0.64.1 = INTEGER: 2
                  $ snmpgetnext -c public -v 1 -OX localhost ipv6RouteTable
                  IPv6-MIB::ipv6RouteIfIndex[3ffe:100:ff00:0:0:0:0:0][64][1] = INTEGER: 2

       Most  of these options can also be configured via configuration tokens.  See the snmp.conf(5)
       manual page for details.


LOGGING OPTIONS
       The mechanism and destination to use for logging of warning and error messages  can  be  con‐
       trolled by passing various parameters to the -L flag.

       -Ln    Disable all logging.

       -Le    Log messages to the standard error stream.

       -Lf FILE
              Log messages to the specified file.

       -Lo    Log messages to the standard output stream.

       -Ls FACILITY
              Log  messages  via  syslog,  using the specified facility ('d' for LOG_DAEMON, 'u' for
              LOG_USER, or '0'-'7' for LOG_LOCAL0 through LOG_LOCAL7).

       There are also "upper case" versions of each of these options, which allow the  corresponding
       logging  mechanism  to  be restricted to certain priorities of message.  Using standard error
       logging as an example:

       -LE pri
              will log messages of priority 'pri' and above to standard error.  See below for possi‐
              ble 'pri' values-

       -LE pri1-pri2
              will log messages with priority between 'pri1' and 'pri2' (inclusive) to standard  er‐
              ror.

       For -LF and -LS the priority specification comes before the file or facility token.

       The priorities recognised are:

              0 or !  for LOG_EMERG,
              1 or a for LOG_ALERT,
              2 or c for LOG_CRIT,
              3 or e for LOG_ERR,
              4 or w for LOG_WARNING,
              5 or n for LOG_NOTICE,
              6 or i for LOG_INFO, and
              7 or d for LOG_DEBUG.

       Normal output is (or will be!) logged at a priority level of LOG_NOTICE


INPUT OPTIONS
       The  interpretation of input object names and the values to be assigned can be controlled us‐
       ing various parameters of the -I flag.  The default behaviour will be described at the end of
       this section.

       -Ib    specifies that the given name should be regarded as a  regular  expression,  to  match
              (case-insensitively)  against  object names in the MIB tree.  The "best" match will be
              used - calculated as the one that matches the closest to the  beginning  of  the  node
              name and the highest in the tree.  For example, the MIB object vacmSecurityModel could
              be  matched  by  the  expression vacmsecuritymodel (full name, but different case), or
              vacm.*model (regexp pattern).

              Note that '.' is a special character in regular expression patterns, so the expression
              cannot specify instance subidentifiers or more than one object name.  A  "best  match"
              expression will only be applied against single MIB object names.  For example, the ex‐
              pression  sys*ontact.0  would not match the instance sysContact.0 (although sys*ontact
              would match sysContact).  Similarly, specifying a MIB module name will not succeed (so
              SNMPv2-MIB::sys.*ontact would not match either).

       -Ih    disables the use of DISPLAY-HINT information when assigning values.  This  would  then
              require providing the raw value:
                  snmpset ... HOST-RESOURCES-MIB::hrSystemDate.0
                                  x "07 D2 0C 0A 02 04 06 08"
              instead of a formatted version:
                  snmpset ... HOST-RESOURCES-MIB::hrSystemDate.0
                                  = 2002-12-10,2:4:6.8

       -Ir    disables  checking table indexes and the value to be assigned against the relevant MIB
              definitions.  This will (hopefully) result in the remote agent  reporting  an  invalid
              request,  rather  than  checking  (and rejecting) this before it is sent to the remote
              agent.

              Local checks are more efficient (and the diagnostics provided also  tend  to  be  more
              precise),  but disabling this behaviour is particularly useful when testing the remote
              agent.

       -IR    enables "random access" lookup of MIB names.  Rather than providing a full OID path to
              the desired MIB object (or qualifying this object with an explicit MIB  module  name),
              the  MIB tree will be searched for the matching object name.  Thus .iso.org.dod.inter‐
              net.mib-2.system.sysDescr.0 (or SNMPv2-MIB::sysDescr.0) can  be  specified  simply  as
              sysDescr.0.

              Warning:
                     Since MIB object names are not globally unique, this approach may return a dif‐
                     ferent MIB object depending on which MIB files have been loaded.

              The MIB-MODULE::objectName syntax has the advantage of uniquely identifying a particu‐
              lar  MIB  object,  as well as being slightly more efficient (and automatically loading
              the necessary MIB file if necessary).

       -Is SUFFIX
              adds the specified suffix to each textual OID given on the command line.  This can  be
              used to retrieve multiple objects from the same row of a table, by specifying a common
              index value.

       -IS PREFIX
              adds  the specified prefix to each textual OID given on the command line.  This can be
              used to specify an explicit MIB module name for all objects being  retrieved  (or  for
              incurably lazy typists).

       -Iu    enables  the  traditional UCD-style approach to interpreting input OIDs.  This assumes
              that OIDs are rooted at the 'mib-2' point in the tree (unless they start with  an  ex‐
              plicit  '.'  or  include  a MIB module name).  So the sysDescr instance above would be
              referenced as system.sysDescr.0.


       Object names specified with a leading '.' are always interpreted as "fully  qualified"  OIDs,
       listing  the  sequence  of MIB objects from the root of the MIB tree.  Such objects and those
       qualified by an explicit MIB module name are unaffected by the -Ib, -IR and -Iu flags.

       Otherwise, if none of the above input options are specified,  the  default  behaviour  for  a
       "relative"  OID is to try and interpret it as an (implicitly) fully qualified OID, then apply
       "random access" lookup (-IR), followed by "best match" pattern matching (-Ib).


ENVIRONMENT VARIABLES
       PREFIX The standard prefix for object identifiers (when using UCD-style output).  Defaults to
              .iso.org.dod.internet.mgmt.mib-2

       MIBS   The list of MIBs to load. Defaults to SNMPv2-TC:SNMPv2-MIB:IF-MIB:IP-MIB:TCP-MIB:
              UDP-MIB:SNMP-VACM-MIB.
              Overridden by the -m option.

       MIBDIRS
              The list of directories to search for MIBs. Defaults to  /usr/share/snmp/mibs.   Over‐
              ridden by the -M option.


FILES
       /etc/snmp/snmpd.conf
              Agent configuration file. See snmpd.conf(5).

       /etc/snmp/snmp.conf

       ~/.snmp/snmp.conf
              Application configuration files. See snmp.conf(5).


SEE ALSO
       snmpget(1),  snmpgetnext(1), snmpset(1), snmpbulkget(1), snmpbulkwalk(1), snmpwalk(1), snmpt‐
       able(1), snmpnetstat(1), snmpdelta(1), snmptrap(1), snmpinform(1), snmpusm(1), snmpstatus(1),
       snmptest(1), snmp.conf(5).


V5.9.4.pre2                                  20 Jul 2010                                  SNMPCMD(1)
snmpcmd(1)
NAME SYNOPSIS DESCRIPTION COMMAND-LINE CONFIG OPTIONS Generic Options
-d Dump (in hexadecimal) the raw SNMP packets sent and received. -D[TOKEN[,...]] -h, --help -H Display a list of configuration file directives understood by the command and then -I [brRhu] -L [eEfFoOsS] -m MIBLIST -M DIRLIST -v 1 | 2c | 3 -P [cdeRuwW] -r retries -t timeout -V, --version -Yname="value" -l secLevel -n contextName -T localCert= -T peerCert= -T trust_cert= -T their_hostname= -3[MmKk] 0xHEXKEY -a authProtocol -A authPassword -e engineID -E engineID -u secName -x privProtocol -X privPassword -Z boots,time -c community
AGENT SPECIFICATION MIB PARSING OPTIONS
-Pc Toggles whether ASN.1 comments should extend to the end of the MIB source line. -Pd Disables the loading of MIB object DESCRIPTIONs when parsing MIB files. This reduces -Pe Toggles whether to show errors encountered when parsing MIB files. These include ref‐ -PR If the same MIB object (parent name and sub-identifier) appears multiple times in the -Pu Toggles whether to allow the underline character in MIB object names and other sym‐ -Pw Show various warning messages in parsing MIB files and building the overall OID tree. -PW Show some additional warning messages, mostly relating to parsing individual MIB ob‐
OUTPUT OPTIONS
-O flag. The effects of these sub-options can be seen by comparison with the following de‐ -Oa Display string values as ASCII strings (unless there is a DISPLAY-HINT defined for the -Ob Display table indexes numerically, rather than trying to interpret the instance -Oe Removes the symbolic labels from enumeration values: -OE Modifies index strings to escape the quote characters: -Of Include the full list of MIB objects when displaying an OID: -On Displays the OID numerically: -Op PRECISION -Oq Removes the equal sign and type information when displaying varbind values: -OQ Removes the type information when displaying varbind values: -Os Display the MIB object name (plus any instance or other subidentifiers): -OS Display the name of the MIB, as well as the object name: -Ot Display TimeTicks values as raw numbers: -OT If values are printed as Hex strings, display a printable version as well. -Ou Display the OID in the traditional UCD-style (inherited from the original CMU code). -OU Do not print the UNITS suffix at the end of the value. -Ov Display the varbind value only, not the OID: -Ox Display string values as Hex strings (unless there is a DISPLAY-HINT defined for the -OX Display table indexes in a more "program like" output, imitating a traditional array-
LOGGING OPTIONS
-Ln Disable all logging. -Le Log messages to the standard error stream. -Lf FILE -Lo Log messages to the standard output stream. -Ls FACILITY -LE pri -LE pri1-pri2
INPUT OPTIONS
-Ib specifies that the given name should be regarded as a regular expression, to match -Ih disables the use of DISPLAY-HINT information when assigning values. This would then -Ir disables checking table indexes and the value to be assigned against the relevant MIB -IR enables "random access" lookup of MIB names. Rather than providing a full OID path to -Is SUFFIX -IS PREFIX -Iu enables the traditional UCD-style approach to interpreting input OIDs. This assumes
ENVIRONMENT VARIABLES FILES SEE ALSO

Generated by phpman v4.10.0-7-g98e9fd5 · Markdown · JSON · MCP Author: Che Dong Under GNU General Public License
2026-09-17 18:45 @216.73.216.176
CrawledBy Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Valid XHTML 1.0 Transitional!Valid CSS!

^_top_^