This wiki has been migrated to https://gitlab.com/wireshark/wireshark/-/wikis/home and is now deprecated. Please use that site instead.
Differences between revisions 1 and 3 (spanning 2 versions)
Revision 1 as of 2005-03-20 17:24:00
Size: 5002
Editor: UlfLamping
Comment: first content
Revision 3 as of 2005-03-25 15:51:25
Size: 5840
Editor: GeraldCombs
Comment: Add more text and links to the Net-SNMP tutorial.
Deletions are marked like this. Additions are marked like this.
Line 4: Line 4:
XXX - add a brief SNMP description here SNMP is used to monitor and manage devices on a network.
Line 12: Line 12:
 * ["UDP"]: Typically, SNMP uses ["UDP"] as its transport protocol. The well known UDP port for SNMP traffic is 161/162. Typically, SNMP uses ["UDP"] as its transport protocol. The well known UDP port for SNMP traffic is 161/162.  It can also run over ["TCP"], ["Ethernet"], ["IPX"], and other protocols.
Line 20: Line 20:
The SNMP dissector is (fully functional, partially functional, not existing, ... whatever the current state is). Also add info of additional Ethereal features where appropriate, like special statistics of this protocol. The SNMP dissector is fully functional.
Line 24: Line 24:
(XXX add links to preference settings affecting how SNMP is dissected). Ethereal's SNMP protocol preferences let you control the display of the OID in the info column, desegmentation of SNMP over TCP, and which MIB modules to load. Ethereal uses the [http://www.net-snmp.org/ Net-SNMP] or UCD SNMP libraries to resolve OIDs, so you can also configure this behavior using the MIBS environment variable or by editing snmp.conf as described in the [http://www.net-snmp.org/tutorial/tutorial-5/commands/mib-options.html Net-SNMP Tutorial].
Line 42: Line 42:
SGMP (an ancestor of SNMP):

 * [http://www.ietf.org/rfc/rfc1028.txt RFC 1028] ''A Simple Gateway Monitoring Protocol''
Line 44: Line 48:
 * [http://www.ietf.org/rfc/rfc1028.txt RFC 1028] ''A Simple Gateway Monitoring Protocol''  * [http://www.ietf.org/rfc/rfc1155.txt RFC 1155] ''Structure and Identification of Management Information for TCP/IP-based Internets''
 * [http://www.ietf.org/rfc/rfc1156.txt RFC 1156] ''Management Information Base for Network Management of TCP/IP-based internets''
 * [http://www.ietf.org/rfc/rfc1157.txt RFC 1157] ''A Simple Network Management Protocol (SNMP)''
 * [http://www.ietf.org/rfc/rfc1158.txt RFC 1158] ''Management Information Base for Network Management of TCP/IP-based internets: MIB-II''

Simple Network Management Protocol (SNMP)

SNMP is used to monitor and manage devices on a network.

History

XXX - add a brief description of SNMP history

Protocol dependencies

Typically, SNMP uses ["UDP"] as its transport protocol. The well known UDP port for SNMP traffic is 161/162. It can also run over ["TCP"], ["Ethernet"], ["IPX"], and other protocols.

Example traffic

XXX - Add example traffic here (as plain text or Ethereal screenshot).

Ethereal

The SNMP dissector is fully functional.

Preference Settings

Ethereal's SNMP protocol preferences let you control the display of the OID in the info column, desegmentation of SNMP over TCP, and which MIB modules to load. Ethereal uses the [http://www.net-snmp.org/ Net-SNMP] or UCD SNMP libraries to resolve OIDs, so you can also configure this behavior using the MIBS environment variable or by editing snmp.conf as described in the [http://www.net-snmp.org/tutorial/tutorial-5/commands/mib-options.html Net-SNMP Tutorial].

Example capture file

XXX - Add a simple example capture file to the SampleCaptures page and link from here. Keep it short, it's also a good idea to gzip it to make it even smaller, as Ethereal can open gzipped files automatically.

Display Filter

A complete list of SNMP display filter fields can be found in the [http://www.ethereal.com/docs/dfref/s/snmp.html display filter reference]

  • Show only the SNMP based traffic:

     snmp 

Capture Filter

You cannot directly filter SNMP protocols while capturing. However, if you know the ["UDP"] ports used (see above), you can filter on that ones.

SGMP (an ancestor of SNMP):

SNMPv1

SNMPv2

SNMPv2 (Community based)

SNMPv3

Discussion

SNMP (last edited 2019-11-01 21:48:45 by GuyHarris)