Add support to Stormshield SNS network devices

[julde2]

Your idea

Hello,

Glpi-agent via SNMP netinventory returns only basic attributes on Stormshield SNS devices (no firmware version, no model, etc.).

I tried to add the support with a new Stormshield perl module looking for another vendor file module in /usr/share/glpi-agent/lib/GLPI/Agent/SNMP/MibSupport without success (+ adding the model in the sysobject.ids file).

The default module "snmp-framework" is still loaded and not the new Stormshield :

xxx@xxxxxx:/usr/share/glpi-agent/lib/GLPI/Agent/SNMP/MibSupport# glpi-netdiscovery  --debug --first 10.186.YY.1 --last 10.186.YY.1 --v2c --credentials  version:2c,community:XXXXXXXXXXXXXXXXXXXXXXXXX

Stormshield.pm loaded   

[debug] initializing job 1
[debug] initializing block 10.186.YY.1-10.186.YY.1
[debug] Current netdiscovery run expiration timeout: few minutes
[debug] using 1 netdiscovery worker
[debug] starting job 1 with 1 ip to scan using 1 worker
[debug] #1, scanning 10.186.YY.1
[info] #1, Failed to load GLPI::Agent::IEC61850::Device, iec61850 protocol discovery not supported
[info] #1, Failed to load iec61850 perl library, iec61850 protocol discovery not supported
[debug] #1, - scanning 10.186.XX.1 with netbios: no result
[debug] #1, - scanning 10.186.XX.1 with echo ping: success
[debug] #1, - scanning 10.186.XX.1 in arp table: success
[debug] #1, full match for sysobjectID .1.3.6.1.4.1.11256.1.20.25 in database
[debug] #1, sysorid table match: snmp-framework mib support enabled
[debug] #1, - scanning 10.186.XX.1 with SNMP, credentials 1: success
<?xml version="1.0" encoding="UTF-8"?>
<REQUEST>
  <CONTENT>
    <DEVICE>
      <AUTHSNMP>1</AUTHSNMP>
      <CONTACT>xxxx@xxxx</CONTACT>
      <DESCRIPTION>NS-BSD VMSNSX04K8370A9 amd64</DESCRIPTION>
      <DNSHOSTNAME>10.186.XX.1</DNSHOSTNAME>
      <IP>10.186.XX.1</IP>
      <IPS>
        <IP>169.254.167.213</IP>
        <IP>169.254.248.87</IP>
        <IP>169.254.61.132</IP>
      </IPS>
      <LOCATION>MA-BK07</LOCATION>
      <MAC>00:50:56:83:3d:10</MAC>
      <MANUFACTURER>Stormshield</MANUFACTURER>
      <SERIAL>ae52417852XX</SERIAL>
      <SNMPHOSTNAME>super-fw</SNMPHOSTNAME>
      <TYPE>NETWORKING SNS</TYPE>
      <UPTIME>22 hours, 30:24.35</UPTIME>
    </DEVICE>
    <MODULEVERSION>7.2</MODULEVERSION>
    <PROCESSNUMBER>1</PROCESSNUMBER>
  </CONTENT>
  <DEVICEID>foo</DEVICEID>
  <QUERY>NETDISCOVERY</QUERY>
</REQUEST>
[debug] #1, #1, worker termination
[debug] #1, Netdiscovery worker terminated

# sysObjectID
xxx@xxxxx:/home/eha# snmpwalk -v2c -c XXXXXXXXXXXXXXXXX 10.186.XX.1 .1.3.6.1.2.1.1.2
iso.3.6.1.2.1.1.2.0 = OID: iso.3.6.1.4.1.11256.1.20.25

xxx@xxxxx:/home/eha# snmpwalk -v2c -c XXXXXXXXXXXXXXXXX 10.186.XX.1 .1.3.6.1.4.1.11256
iso.3.6.1.4.1.11256.1.0.1.0 = STRING: "EVA2"
iso.3.6.1.4.1.11256.1.0.2.0 = STRING: "4.8.12"
iso.3.6.1.4.1.11256.1.0.3.0 = STRING: "VMSNSX0XXXXXXX"
iso.3.6.1.4.1.11256.1.0.4.0 = STRING: "mon-super-fw"
iso.3.6.1.4.1.11256.1.0.5.0 = STRING: "us"
...

xxx@xxx:~$ glpi-agent --version
GLPI Agent (1.18-1)
Built by Debian
Source time: 2026-06-23 11:11

GLPI version : 11.0.8

Could you please give me a hand to add this new vendor ? thanks in advance,
Julien

[g-bougard]

Hi @julde2

can you provide a full snmpwalk output if the expected format using the command provided here ?
https://glpi-agent.readthedocs.io/en/latest/bug-reporting.html#snmpwalk-output

If you can also share a MIB which describes the private OIDs, this can help.

[julde2]

Hello Guillame,

Thank you for your quick answer, please find the (obfuscate) output of the snmp walk on the root + Stormshield MIBS in attachment.

xxx@xxx:/home/eha# snmpwalk -v2c  -c xxxxxxxxxxxxxxx-t 15 -Cc -On -Ox 10.186.XX.1 .1 > walk-sns-stormshield.walk

Regards,
Julien

[g-bougard]

Attachment seems missing.

If you obfuscate any data, please take care to keep it valid: ips and mac addresses must be valid.

[julde2]

Hello, please find again the mibs + output of snmpwalk, thank you Guillaume !

walk-sns-stormshield.zip
mibs-5.0.4.zip

[g-bougard]

Hi @julde2

I just pushed in ba50f7f a commit to enhance StormShield devices support. Indeed the code was still there in our FreeBSD module but not triggered for this device as this one reports itself with stormshield oid in SysObjectID. This commit makes the code also triggered in that case.

Now glpi-agent will report XML like this for the walk you shared:

<?xml version="1.0" encoding="UTF-8"?>
<REQUEST>
  <CONTENT>
    <DEVICE>
      <FIRMWARES>
        <DESCRIPTION>device firmware</DESCRIPTION>
        <MANUFACTURER>StormShield</MANUFACTURER>
        <NAME>EVA2</NAME>
        <TYPE>device</TYPE>
        <VERSION>4.8.12</VERSION>
      </FIRMWARES>
      <INFO>
        <COMMENTS>NS-BSD VMSNSX04KXXXXXX amd64</COMMENTS>
        <CONTACT>hxxxxxxxxxxxxxxxxxxxxxxxxx@xxxxx.xx</CONTACT>
        <FIRMWARE>4.8.12</FIRMWARE>
        <ID>0</ID>
        <IPS>
...
        </IPS>
        <LOCATION>LIEU-XXX</LOCATION>
        <MAC>00:50:56:83:f8:57</MAC>
        <MANUFACTURER>StormShield</MANUFACTURER>
        <MEMORY>0</MEMORY>
        <MODEL>EVA2</MODEL>
        <NAME>name-of-the-sns-vrouter</NAME>
        <RAM>3049</RAM>
        <SERIAL>VMSNSX04KXXXXXX</SERIAL>
        <TYPE>NETWORKING</TYPE>
        <UPTIME>1 day, 1:45:51.22</UPTIME>
      </INFO>
      <PORTS>
...

As you can see, firmware, serial and model are now set as expected.

Can you confirm you obtain what you expect using next nightly build ?

[julde2]

hello Guillaume,

Model and firmware are now filled correctly 👌🏻
Thank you for your help !

Have a nice day,
Julien