mirror of
https://github.com/zeek/zeek.git
synced 2025-10-06 16:48:19 +00:00

This supports parsing of SNMPv1 (RFC 1157), SNMPv2 (RFC 1901/3416), and SNMPv2 (RFC 3412). An event is raised for each SNMP PDU type, though there's not currently any event handlers for them and not a default snmp.log either. However, simple presence of SNMP is currently visible now in conn.log service field and known_services.log.
11 lines
300 B
Text
11 lines
300 B
Text
snmp_trap
|
|
[orig_h=127.0.0.1, orig_p=57150/udp, resp_h=127.0.0.1, resp_p=162/udp]
|
|
is_orig: T
|
|
[community=public]
|
|
enterprise: 1.3.6.1.4.1.31337.0
|
|
agent: 1.0.0.127
|
|
generic_trap: 0
|
|
specific_trap: 0
|
|
time_stamp: 0
|
|
oid: 1.3.6.1.2.1.2.1.0
|
|
value (tag=0x02): 33
|