Collaborate Disseminate
I read on Wikipedia’s Article on SNMP
SNMPv1 and v2 are vulnerable to IP spoofing attacks, whether it runs
over TCP or UDP, and is a subject to bypassing device access lists
that might have been implemented to restrict SNMP access… Continue reading Why is SNMP vulnerable to IP Spoofing?
I grasp a basic theoretical knowledge about SNMP. However, I saw several events from our SIEM showing that a client endpoint generated SNMP events with port 161 and concluding that this host could be a local UDP scanner or so… Continue reading Examples of SNMP
In many resources, I see that community strings are also called default passwords. But in the Server Manager, I see “Community name” and it makes more sense.
So why people often use the phrase “default password”? If we enume… Continue reading SNMP – need help with terminology
Security wise, SNMP v3 improves over v2 by using users for polling agents or agents sending trap data to the management system. But what if the agent is compromised? Will the attacker be able to get the password of the user u… Continue reading Where/How are SNMP v3 passwords stored on the agent?
As in this MIB documentation: http://www.circitor.fr/Mibs/Html/F/FORTINET-FORTIGATE-MIB.php#fgIpsAnomalyDetections
fgIpsAnomalyDetections 1.3.6.1.4.1.12356.101.9.2.1.1.9
Number of intrusions DECed as anomalies since start-u… Continue reading What does "DECed" mean in Network Security?
I am trying to configure Net-SNMP to accept incoming SNMP v3 requests to a proxy agent and relay them to other internal application servers as SNMP v2c requests.
I saw some comments that it is possible to get SNMP v3 reques… Continue reading Proxy snmp v3 requests to snmp v2c configured servers [migrated]
Time to time IPSec tunnel status become down, with unusual SNMP Traffic. when I disable and enable port manually, it become normal.
I am using 200E fortigate firewall.
Have you any idea or previous experience with this iss… Continue reading IPsec down with unusual SNMP traffic [on hold]
I have enabled SNMP on my Fortigate 200E firewall and SolarWinds Real-time Bandwidth Monitor is being used to monitor SNMP traffic.
Time to time it shows unusual traffic (image attached below) through a certain interface an… Continue reading Unrecognised Traffic in Fortigate 200E Firewall [on hold]
I want to learn about SNMP pentesting. I have downloaded VyOS virtual machine. Next I downloaded the snmpwalk tool to pentest the SNMP protocol.
I have learned that if someone guesses/bruteforces the Community string then he… Continue reading What will happend if I change the SYSname SNMP? [on hold]
SNMP is an Internet Standard protocol for collecting information about managed devices on IP networks. SNMP became a vital component in many networks for monitoring the health and resource utilization of devices and connections. For a long time, SNMP … Continue reading Can SNMP (Still) Be Used to Detect DDoS Attacks?