[Snort-devel] spo_SnmpTrap.

Glenn Mansfield Keeni glenn at ...1085...
Thu Oct 10 06:17:03 EDT 2002

    The net-snmp support for the snortSnmp plugin ran into
some rough weather - the port specification convention has
changed, the community specification convention has changed
and the default port selection logic seems to be buggy in the
present net-snmp release (5.0.5).
    A patch for the spo_SnmpTrap plugin has been readied - this
will work with minimal changes to your snort.conf. There is only
one change - if you are using v2c then the community MUST be
specified using the '-c <community>' option BEFORE the
snmptraplistener address. [Community after the snmptraplistener
address will not be accepted]
    The comments in the snort.conf and the explanation in the
doc/README.SNMP have been updated to that effect. The patch is
available on


This should go into the CVS, will someone please do the needful.



More information about the Snort-devel mailing list