Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am logging all incoming SNMP traps to file, for further processing, via:

snmptrapd -Lf /path/to/my/file.log

So this will log all traps coming in on port 162. Is there a way I can tell the differences between different sources, i.e vendors. I believe this would be the "OID" field but i'm unsure. Any thoughts would be welcomed, if not I will just have to use a lookup with IP addresses, but I'm sure I saw that there is a unique part to each vendor.

Cheers

share|improve this question
up vote 0 down vote accepted

Okay, so here is my solution, not an answer but I will close the question off...

So I made sure that I formatted the SNMP that was written to file with my own requirements, so I would know where the community string was... at least that way I could have a unique community string reference.

I used the following command...

snmptrapd -Lf /path/to/file/snmptrapd.log -F %y-%m-%l %h-:%j - %b(%B) - Security=%P - Payload=%v\n\n

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .