[Snort-devel] spo_SnmpTrap.

Glenn Mansfield Keeni glenn at ...1085...
Thu Oct 10 06:17:03 EDT 2002


Hi,
    The net-snmp support for the snortSnmp plugin ran into
some rough weather - the port specification convention has
changed, the community specification convention has changed
and the default port selection logic seems to be buggy in the
present net-snmp release (5.0.5).
    A patch for the spo_SnmpTrap plugin has been readied - this
will work with minimal changes to your snort.conf. There is only
one change - if you are using v2c then the community MUST be
specified using the '-c <community>' option BEFORE the
snmptraplistener address. [Community after the snmptraplistener
address will not be accepted]
    The comments in the snort.conf and the explanation in the
doc/README.SNMP have been updated to that effect. The patch is
available on

http://www.cysol.co.jp/contrib/snortsnmp/SnortSnmpPatch-1.9.0-01.gz


This should go into the CVS, will someone please do the needful.

Thanks

Glenn






More information about the Snort-devel mailing list