I m trying to filter the generic snmp trap using custom nbar protocol
i have created the following protocol in NBAR
ip nbar custom TRAP 26 hex 4 destination udp 162
Which checks the hex value 4 at 26th Byte in udp payload. It seems that it filters all trap traffic. Any idea at what byte (offset) the generic trap is located in snmp pdu.