SNMPv3 query failing

[fisherman]

Hello
I'm having issues with querying Nutanix via SNMP v3.

snmpwalk -v 3 -a SHA -x AES -l authPriv -E 0x8000A12F046010ff54654d4ffe87a3511771a1de80 -u [user] -A [pass1] -X [pass2] [hostname]

works like a charm

I also have 4 macros:

<snmpv3_contextname>{$NTX_SNMP_CONTEXT}</snmpv3_contextname>
<snmpv3_securityname>{$NTX_SNMP_USER}</snmpv3_securityname>
<snmpv3_securitylevel>2</snmpv3_securitylevel>
<snmpv3_authprotocol>1</snmpv3_authprotocol>
<snmpv3_authpassphrase>{$NTX_SNMP_AUTH}</snmpv3_authpassphrase>
<snmpv3_privprotocol>1</snmpv3_privprotocol>
<snmpv3_privpassphrase>{$NTX_SNMP_PRIV}</snmpv3_privpassphrase>

Zabbix is unable to connect throwing out
Authentication failure (incorrect password, community or key)

Am I doing something wrong?

I can't reconfigure SNMP on Nutanix...

Thanks in advance

[fisherman]

nope, nothing, just auth failures

[gofree]

I'm not sure now , but something reminds me that special characters can sometimes play tricks with you. Just an idea.

[fisherman]

I'm not sure now , but something reminds me that special characters can sometimes play tricks with you. Just an idea.

just numbers and letters :/

[cyber]

If you leave it running, does it retrieve anything over time? With gaps, but retrieves?...

[cyber]

Well, I have quite similar situation here... polling over snmpv3 is kind of intermittent... gaps in data etc. From command line smnpget no issues whatsoever...
I have done numerous tcpdumps... All point to devices failing to authenticate user... Different makes and models (cisco, dell) still getting this "S:snmpUsmMIB.usmMIBObjects.usmStats.usmStatsW rong Digests.0=xxxx" in return packets...
100+ item per device... 2/3 fails, 1/3 succeeds. and sometimes all succeed... Absolutely random.. Happens even when I left only couple of snmp items for a proxy. Just does not work ...

tcpdump of a request...

09:00:00.514622 IP (tos 0x0, ttl 64, id 8117, offset 0, flags [DF], proto UDP (17), length 91)
<proxy>.36261 > <host>.snmp: [bad udp cksum 0xb620 -> 0x9b96!] { SNMPv3 { F=r } { USM B=0 T=0 U="" } { ScopedPDU E= C="" { GetRequest(14) R=764240053 } } }
09:00:00.526535 IP (tos 0x0, ttl 248, id 5054, offset 0, flags [none], proto UDP (17), length 134)
<host>.snmp > <proxy>.36261: [udp sum ok] { SNMPv3 { F= } { USM B=20 T=68903 U="" } { ScopedPDU E=_80_00_00_09_03_00_6c_dd_30_1c_b6_d0 C="" { Report(32) R=764240053 S:snmpUsmMIB.usmMIBObjects.usmStats.usmStatsUnknow nEngineIDs.0=2439 } } }
09:00:00.526613 IP (tos 0x0, ttl 64, id 8120, offset 0, flags [DF], proto UDP (17), length 171)
<proxy>.36261 > <host>.snmp: [bad udp cksum 0xb670 -> 0x720b!] { SNMPv3 { F=apr } { USM B=20 T=68903 U="<username>" } { ScopedPDU [!scoped PDU]40_f4_c3_11_8c_bb_3e_4e_fa_f3_26_46_65_2c_89_f0_d2 _d6_6a_2e_21_f8_99_77_db_66_bf_76_66_89_37_13_9f_f 1_28_f4_2a_69_79_69_b8_c6_b5_ea_b5_b1_47_09_05_ba_ a2_3f_ff_48_37_ba} }
09:00:00.537973 IP (tos 0x0, ttl 248, id 5055, offset 0, flags [none], proto UDP (17), length 143)
<host>.snmp > <proxy>.36261: [udp sum ok] { SNMPv3 { F= } { USM B=20 T=68903 U="<username>" } { ScopedPDU E=_80_00_00_09_03_00_6c_dd_30_1c_b6_d0 C="" { Report(32) R=2147483647 S:snmpUsmMIB.usmMIBObjects.usmStats.usmStatsWrongD igests.0=963 } } }