mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
a0c06a957b
This supports parsing of SNMPv1 (RFC 1157), SNMPv2 (RFC 1901/3416), and SNMPv2 (RFC 3412). An event is raised for each SNMP PDU type, though there's not currently any event handlers for them and not a default snmp.log either. However, simple presence of SNMP is currently visible now in conn.log service field and known_services.log.
34 lines
1.8 KiB
Text
34 lines
1.8 KiB
Text
snmp_get_request
|
|
[orig_h=127.0.0.1, orig_p=54211/udp, resp_h=127.0.0.1, resp_p=161/udp]
|
|
is_orig: T
|
|
[id=544943986, max_size=16384, flags=4, auth_flag=F, priv_flag=F, reportable_flag=T, security_model=3, security_params=0^N^D\0^B^A*^B^A*^D\0^D\0^D\0, pdu_context=[engine_id=, name=]]
|
|
request_id: 544943986
|
|
error_stat: 0
|
|
error_idx: 0
|
|
snmp_report
|
|
[orig_h=127.0.0.1, orig_p=54211/udp, resp_h=127.0.0.1, resp_p=161/udp]
|
|
is_orig: F
|
|
[id=544943986, max_size=16384, flags=0, auth_flag=F, priv_flag=F, reportable_flag=F, security_model=3, security_params=0\x1b^D^M\x80\0\x1f\x88\x80\xa9I\x8e^:,0C^B^A\xdd^B^A\xdd^D\0^D\0^D\0, pdu_context=[engine_id=\x80\0\x1f\x88\x80\xa9I\x8e^:,0C, name=]]
|
|
request_id: 544943986
|
|
error_stat: 0
|
|
error_idx: 0
|
|
oid: 1.3.6.1.6.3.15.1.1.0
|
|
value (tag=0x41): 3
|
|
snmp_get_request
|
|
[orig_h=127.0.0.1, orig_p=54211/udp, resp_h=127.0.0.1, resp_p=161/udp]
|
|
is_orig: T
|
|
[id=544943986, max_size=16384, flags=4, auth_flag=F, priv_flag=F, reportable_flag=T, security_model=3, security_params=0/^D^M\x80\0\x1f\x88\x80\xa9I\x8e^:,0C^B^A\xdd^B^A\xdd^D^Husername^D^L\0\0\0\0\0\0\0\0\0\0\0\0^D\0, pdu_context=[engine_id=\x80\0\x1f\x88\x80\xa9I\x8e^:,0C, name=]]
|
|
request_id: 544943986
|
|
error_stat: 0
|
|
error_idx: 0
|
|
oid: 1.3.6.1.2.1.1.6.0
|
|
value (tag=0x05): <unspecified>
|
|
snmp_response
|
|
[orig_h=127.0.0.1, orig_p=54211/udp, resp_h=127.0.0.1, resp_p=161/udp]
|
|
is_orig: F
|
|
[id=544943986, max_size=16384, flags=0, auth_flag=F, priv_flag=F, reportable_flag=F, security_model=3, security_params=0#^D^M\x80\0\x1f\x88\x80\xa9I\x8e^:,0C^B^A\xdd^B^A\xdd^D^Husername^D\0^D\0, pdu_context=[engine_id=\x80\0\x1f\x88\x80\xa9I\x8e^:,0C, name=]]
|
|
request_id: 544943986
|
|
error_stat: 0
|
|
error_idx: 0
|
|
oid: 1.3.6.1.2.1.1.6.0
|
|
value (tag=0x04):
|