logstash-integration-snmp 4.0.6-java → 4.1.0-java

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 87e91726f2da35d5c128693fe731cabd216590807964ffc0181160eb8a19b216
-  data.tar.gz: 6174140288b22f07ca266fe3a9d929ee4a0777e7b90f6fa2c8c10c41942ced34
+  metadata.gz: ceae98771c874e51d755ba48a73edb8322ed4fcc291693b912e1c14be6e8b76b
+  data.tar.gz: f58d275ed475825c8c71aed346a75e236cc237089e91a411cbb2dcb74d32733c
 SHA512:
-  metadata.gz: cf3f6eb1b7b4588a3516387c5d2a26f4234d4697a3384653c150e2a91cfb12551f9ce3e8f2a7370bcc4f68ac54a897e0533e5e1da6feb6082559eeff65d34c69
-  data.tar.gz: aaaead569d07cb2b4622740cc8fe9bcc0ae97101fb699133650e8e759f60bcb101f4f3ee22f7e232a26e16d67cb3915034077d896258764d4da71701d3947c71
+  metadata.gz: 55999a85c693fc954303318f2ece9f0e695950c3b4b355689b1cc8ae40ef48dc032d2fc33bbd30087f3786c59490462497085017c166c1fe0ad7bfa36d5a4cc0
+  data.tar.gz: 3fb4d9a34127b33b240cb5e2f31cb75c8aae6d54c5fadf4a12bae22b093282679572e51856e2ff4521911e6ad15aa4f54014dcbeba0773ef99dc897f55aef4aa

data/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 4.1.0
+  - Add support for SNMPv3 `context engine ID` and `context name` to the `snmptrap` input [#76](https://github.com/logstash-plugins/logstash-integration-snmp/pull/76)
+
+## 4.0.7
+  - FIX: The `snmptrap` input now correctly enforces the user security level set by `security_level` config, and drops received events that do not match the configured value [#75](https://github.com/logstash-plugins/logstash-integration-snmp/pull/75)
+
 ## 4.0.6
   - [DOC] Fix typo in snmptrap migration section [#74](https://github.com/logstash-plugins/logstash-integration-snmp/pull/74)
 

data/VERSION

@@ -1 +1 @@
-4.0.6
+4.1.0

data/docs/input-snmptrap.asciidoc

@@ -60,6 +60,8 @@ The value is stored in the `@metadata` where it can be used by other plugins in
 |ECS disabled, v1, v8 |Availability|Description
 |[@metadata][input][snmptrap][pdu][agent_addr]|`SNMPv1`|Network address of the object generating the trap
 |[@metadata][input][snmptrap][pdu][community]|`SNMPv1` `SNMPv2c`|SNMP community
+|[@metadata][input][snmptrap][pdu][context_engine_id]|`SNMPv3`|SNMP context engine ID
+|[@metadata][input][snmptrap][pdu][context_name]|`SNMPv3`|SNMP context name
 |[@metadata][input][snmptrap][pdu][enterprise]|`SNMPv1`|Type of object generating the trap
 |[@metadata][input][snmptrap][pdu][error_index]|`SNMPv2c` `SNMPv3`|Provides additional information by identifying
 which variable binding in the list caused the error
@@ -350,8 +352,11 @@ The `priv_protocol` option specifies the SNMPv3 privacy/encryption protocol.
 [id="plugins-{type}s-{plugin}-security_level"]
 ===== `security_level`
 
-  * Value can be any of: `noAuthNoPriv`, `authNoPriv`, `authPriv`
-  * There is no default value for this setting
+  * Value can be any of:
+    - `noAuthNoPriv`: allows receiving traps messages without authentication or encryption.
+    - `authNoPriv`: trap messages must be authenticated according to <<plugins-{type}s-{plugin}-security_name>>/<<plugins-{type}s-{plugin}-auth_protocol>>/<<plugins-{type}s-{plugin}-auth_pass>>. Encrypted messages are allowed but not required.
+    - `authPriv`: trap messages must be both authenticated according to <<plugins-{type}s-{plugin}-security_name>>/<<plugins-{type}s-{plugin}-auth_protocol>>/<<plugins-{type}s-{plugin}-auth_pass>> and encrypted according to <<plugins-{type}s-{plugin}-priv_protocol>>/<<plugins-{type}s-{plugin}-priv_pass>>.
+  * The default value is `noAuthNoPriv`.
 
 The `security_level` option specifies the SNMPv3 security level between
 Authentication, No Privacy; Authentication, Privacy; or no Authentication, no Privacy.

data/lib/logstash/plugin_mixins/snmp/common.rb

@@ -118,7 +118,7 @@ module LogStash
           validate_usm_user! if validate_usm_user
 
           unless @security_name.nil?
-            client_builder.addUsmUser(@security_name, @auth_protocol, @auth_pass&.value, @priv_protocol, @priv_pass&.value)
+            client_builder.addUsmUser(@security_name, @auth_protocol, @auth_pass&.value, @priv_protocol, @priv_pass&.value, @security_level || 'noAuthNoPriv')
           end
 
           client_builder.setMapOidVariableValues(@oid_map_field_values)

data/lib/logstash-integration-snmp_jars.rb

@@ -2,5 +2,6 @@
 
 require 'jar_dependencies'
 require_jar('org.snmp4j', 'snmp4j', '3.8.0')
+require_jar('org.snmp4j', 'snmp4j-log4j', '2.8.11')
 require_jar('org.snakeyaml', 'snakeyaml-engine', '2.7')
-require_jar('org.logstash.integrations', 'plugin', '4.0.6')
+require_jar('org.logstash.integrations', 'plugin', '4.1.0')

data/spec/integration/inputs/snmptrap_spec.rb

@@ -185,6 +185,27 @@ describe LogStash::Inputs::Snmptrap, :integration => true do
           expect(queue.size).to eq(0)
         end
       end
+
+      context 'when receiving a request with invalid security level' do
+        it 'should not process the message' do
+          queue = run_plugin_and_get_queue(plugin, timeout: 3) do
+            @trap_sender.send_trap_v3(target_address, security_name, auth_protocol, auth_pass, priv_protocol, priv_pass, 'noAuthNoPriv', {'1.1' => 'foo'})
+          end
+
+          expect(queue.size).to eq(0)
+        end
+      end
+
+      context 'when receiving a request with higher security level' do
+        let(:security_level) { 'authNoPriv' }
+        it 'should process the message' do
+          queue = run_plugin_and_get_queue(plugin, timeout: 3) do
+            @trap_sender.send_trap_v3(target_address, security_name, auth_protocol, auth_pass, priv_protocol, priv_pass, 'authPriv', {'1.1' => 'foo'})
+          end
+
+          expect(queue.size).to eq(1)
+        end
+      end
     end
 
     context 'with supported_versions' do

metadata

@@ -1,16 +1,16 @@
 --- !ruby/object:Gem::Specification
 name: logstash-integration-snmp
 version: !ruby/object:Gem::Version
-  version: 4.0.6
+  version: 4.1.0
 platform: java
 authors:
 - Elastic
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-01-23 00:00:00.000000000 Z
+date: 2025-08-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
+  name: logstash-core-plugin-api
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
@@ -19,7 +19,6 @@ dependencies:
     - - "<="
       - !ruby/object:Gem::Version
         version: '2.99'
-  name: logstash-core-plugin-api
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -31,12 +30,12 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '2.99'
 - !ruby/object:Gem::Dependency
+  name: logstash-mixin-ecs_compatibility_support
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.3'
-  name: logstash-mixin-ecs_compatibility_support
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -45,12 +44,12 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '1.3'
 - !ruby/object:Gem::Dependency
+  name: logstash-mixin-validator_support
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.0'
-  name: logstash-mixin-validator_support
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -59,12 +58,12 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '1.0'
 - !ruby/object:Gem::Dependency
+  name: logstash-mixin-event_support
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.0'
-  name: logstash-mixin-event_support
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -73,12 +72,12 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '1.0'
 - !ruby/object:Gem::Dependency
+  name: logstash-mixin-normalize_config_support
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.0'
-  name: logstash-mixin-normalize_config_support
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -87,12 +86,12 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '1.0'
 - !ruby/object:Gem::Dependency
+  name: logstash-codec-plain
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-  name: logstash-codec-plain
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -101,12 +100,12 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
+  name: logstash-core
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
         version: 6.5.0
-  name: logstash-core
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -115,12 +114,12 @@ dependencies:
       - !ruby/object:Gem::Version
         version: 6.5.0
 - !ruby/object:Gem::Dependency
+  name: rspec-wait
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-  name: rspec-wait
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -129,12 +128,12 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
+  name: logstash-devutils
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
         version: '2.3'
-  name: logstash-devutils
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -469,8 +468,9 @@ files:
 - spec/unit/inputs/common_spec.rb
 - spec/unit/inputs/snmp_spec.rb
 - spec/unit/inputs/snmptrap_spec.rb
-- vendor/jar-dependencies/org/logstash/integrations/plugin/4.0.6/plugin-4.0.6.jar
+- vendor/jar-dependencies/org/logstash/integrations/plugin/4.1.0/plugin-4.1.0.jar
 - vendor/jar-dependencies/org/snakeyaml/snakeyaml-engine/2.7/snakeyaml-engine-2.7.jar
+- vendor/jar-dependencies/org/snmp4j/snmp4j-log4j/2.8.11/snmp4j-log4j-2.8.11.jar
 - vendor/jar-dependencies/org/snmp4j/snmp4j/3.8.0/snmp4j-3.8.0.jar
 homepage: http://www.elastic.co/guide/en/logstash/current/index.html
 licenses:
@@ -479,7 +479,6 @@ metadata:
   logstash_plugin: 'true'
   logstash_group: integration
   integration_plugins: logstash-input-snmp,logstash-input-snmptrap
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -495,8 +494,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.26
-signing_key:
+rubygems_version: 3.6.3
 specification_version: 4
 summary: Integration with SNMP - Logstash plugins
 test_files: