SNMP Generic Trap Authentication failure filtering

Unanswered Question
Mar 10th, 2010

Hi,


I m trying to filter the generic snmp trap using custom nbar protocol


i have created the following protocol in NBAR


ip nbar custom TRAP 26 hex 4 destination udp 162


Which checks the hex value 4 at 26th Byte in udp payload. It seems that it filters all trap traffic. Any idea at what byte (offset) the generic trap is located in snmp pdu.


TIA


Hitesh

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Hitesh Vinzoda Fri, 05/14/2010 - 05:49

Task completed using FPM Flexible packet matching and regex.... Awesome..!!


Hitesh Vinzoda

Actions

This Discussion