Ethereal-users: Re: [ethereal-users] Ethereal dissector for SNMP traps?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Craig Rodrigues <rodrigc@xxxxxxxxxxxx>
Date: Mon, 31 Jan 2000 16:05:35 -0500
On Mon, Jan 31, 2000 at 11:12:41AM -0800, Guy Harris wrote:
> 
> From what UDP port number was the trap packet sent, and to which port
> was it sent?  It *should* be recognizing as SNMP any packets sent to or
> from port 161, which is the standard SNMP port.

I used the following invocation to generate an SNMP trap, with the
utility from UCD SNMP:

snmptrap [machinename] public 6 103 0 -a [machinename]

I used the following filter rule to gather the packets:
\udp and dst [machinename] and dst port 162

The packets are sent from various ports, but always received on
port 162 which is the snmp-trap port.  The packets show up
as UDP, and are not dissected any further.

Any ideas?
-- 
Craig Rodrigues        
http://www.gis.net/~craigr    
rodrigc@xxxxxxxxxxxx