Glenn Mansfield Keeni
glenn at ...1085...
Thu Oct 10 06:17:03 EDT 2002
The net-snmp support for the snortSnmp plugin ran into
some rough weather - the port specification convention has
changed, the community specification convention has changed
and the default port selection logic seems to be buggy in the
present net-snmp release (5.0.5).
A patch for the spo_SnmpTrap plugin has been readied - this
will work with minimal changes to your snort.conf. There is only
one change - if you are using v2c then the community MUST be
specified using the '-c <community>' option BEFORE the
snmptraplistener address. [Community after the snmptraplistener
address will not be accepted]
The comments in the snort.conf and the explanation in the
doc/README.SNMP have been updated to that effect. The patch is
This should go into the CVS, will someone please do the needful.
More information about the Snort-devel