SNMP Generic Trap Authentication failure filtering

[Hitesh Vinzoda]

Hi,

I m trying to filter the generic snmp trap using custom nbar protocol

i have created the following protocol in NBAR

ip nbar custom TRAP 26 hex 4 destination udp 162

Which checks the hex value 4 at 26th Byte in udp payload. It seems that it filters all trap traffic. Any idea at what byte (offset) the generic trap is located in snmp pdu.

TIA

Hitesh

[Hitesh Vinzoda]

Task completed using FPM Flexible packet matching and regex.... Awesome..!!

Hitesh Vinzoda