[Snort-devel] spo_SnmpTrap.c

Andrew Hood ajhood at ...1595...
Wed Oct 2 04:34:15 EDT 2002

net-snmp changed the syntax of the parameters. -p <port> is no longer 
valid. The new syntax is <trapipaddr>[:<port>]

Also if you don't specify the port it defaults to 161, which is correct 
for snmp but not for trap/inform. In effect it is a compulsory 
parameter. This can be worked around by adding

     if (!data->session.remote_port) data->session.remote_port=162;


     data->trapdPort = data->session.remote_port;
     return (data);

Patch to spo_SnmpTrap.c without the workaround attached.

There's no point in being grown up if you can't be childish sometimes.
                 -- Dr. Who
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: spo_SnmpTrap.patch
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20021002/07f2a238/attachment.ksh>

More information about the Snort-devel mailing list