Questions tagged [snmp]

Simple network management protocol (SNMP) is a protocol for gathering and modyfing information about devices on an IP network.

Filter by
Sorted by
Tagged with
0 votes
1 answer
228 views

SNMP Enumeration

I'm scanning a machine that has the UDP port 161 open and I'm not able to run snmpwalk against it as I'm returned with the error: Timeout: No Response from <IP> I tried to run the onesixtyone ...
user avatar
  • 1
0 votes
2 answers
702 views

Nmap with snmp-brute script freezes at 33.33%

I'm currently undergoing a penetration testing course where I discover the basics and I have a task where I need to perform SNMP enumeration on a target. My working environment is as follows : Host : ...
user avatar
0 votes
1 answer
425 views

Why is SNMP vulnerable to IP Spoofing?

I read on Wikipedia's Article on SNMP SNMPv1 and v2 are vulnerable to IP spoofing attacks, whether it runs over TCP or UDP, and is a subject to bypassing device access lists that might have ...
user avatar
  • 101
2 votes
1 answer
108 views

Examples of SNMP

I grasp a basic theoretical knowledge about SNMP. However, I saw several events from our SIEM showing that a client endpoint generated SNMP events with port 161 and concluding that this host could be ...
user avatar
  • 103
0 votes
1 answer
99 views

SNMP - need help with terminology

In many resources, I see that community strings are also called default passwords. But in the Server Manager, I see "Community name" and it makes more sense. So why people often use the phrase "...
user avatar
  • 31
0 votes
1 answer
112 views

What does "DECed" mean in Network Security?

As in this MIB documentation: http://www.circitor.fr/Mibs/Html/F/FORTINET-FORTIGATE-MIB.php#fgIpsAnomalyDetections fgIpsAnomalyDetections 1.3.6.1.4.1.12356.101.9.2.1.1.9 Number of intrusions DECed ...
user avatar
0 votes
1 answer
119 views

IPsec down with unusual SNMP traffic [closed]

Time to time IPSec tunnel status become down, with unusual SNMP Traffic. when I disable and enable port manually, it become normal. I am using 200E fortigate firewall. Have you any idea or previous ...
user avatar
  • 650
1 vote
0 answers
423 views

List of default SNMP MIB tree values / OIDs? [closed]

I'm trying to find a resource that lists default SNMP mib values and object identifiers for various vendors / operating systems to use with snmpwalk. I have a list of MIB tree values for Microsoft ...
user avatar
  • 177
0 votes
1 answer
370 views

Feeding Azure portal logs into a SIEM solution

Currently working on a cloud transformation project where all infrastructure is being placed into Azure. We currently use a SIEM solution to monitor and assess events across the environment. The ...
user avatar
  • 107
1 vote
3 answers
10k views

Is running SNMP v2c really insecure and can lead to compromisses?

I currently use SNMP v2c to monitor switches, servers, ect... to graph for performance. Question in terms of SNMP. Everyone says that running SNMP insecure is a security risk. How is a graphing ...
user avatar
  • 3,086
4 votes
1 answer
720 views

Nmap snmp-info.nse Security Name

I'm attempting to issue an snmpget request to a device but i'm unable to determine the security name. Running the Nmap snmp-info.nse is successful and no Security Name is required to successfully run ...
user avatar