SNMP Generic Trap Authentication failure filtering

Unanswered Question
Mar 10th, 2010
User Badges:
  • Silver, 250 points or more


I m trying to filter the generic snmp trap using custom nbar protocol

i have created the following protocol in NBAR

ip nbar custom TRAP 26 hex 4 destination udp 162

Which checks the hex value 4 at 26th Byte in udp payload. It seems that it filters all trap traffic. Any idea at what byte (offset) the generic trap is located in snmp pdu.



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Hitesh Vinzoda Fri, 05/14/2010 - 05:49
User Badges:
  • Silver, 250 points or more

Task completed using FPM Flexible packet matching and regex.... Awesome..!!

Hitesh Vinzoda


This Discussion