Re:

Pushpa Thimmaiah <[email protected]> Fri, 1 Oct 2021 19:19:27 +0530
Newsgroups gmane.network.net-snmp.devel
Message-ID <CAASqVJUAhDokpxHppzW6v72pJNtO84tPjVnrsp4grQumVGSDhQ@mail.gmail.com>
Hi Larry Hayes,

Yes.  I have configured wireshark properly.
I have configured the wireshark to accept trap of credentials MD5+128 just
to verify settings are correct.

root#
root:~# snmptrap -v 3 -n "" -a MD5 -A mypassword -x *AES128* -X mypassword
-l authPriv -u putest128 -e 0x8000236e0300b0ae037994 10.12.73.118  ""
.1.3.6.1.4.1.8072.2.3.1 .1.3.6.1.4.1.8072.2.1.1 i 22222     <-----------
decrypt properly

root:~# snmptrap -v 3 -n "" -a MD5 -A mypassword -x *AES192* -X mypassword
-l authPriv -u putesting -e 0x8000236e0300b0ae037994 10.12.73.118  ""
.1.3.6.1.4.1.8072.2.3.1 .1.3.6.1.4.1.8072.2.1.1 i 123456  <---------
Throws 'Decrypted data not formatted as expected' error
root:~#

Attached wireshark snapshot for these two traps.



On Fri, Oct 1, 2021 at 1:34 AM Larry Hayes <[email protected]> wrote:

> Are you sure you have Wireshark setup correctly to decrypt the messages?
>
> WireShark:
> Edit -> Preferences -> Protocols -> SNMP -> Users Table
>
> https://wiki.wireshark.org/SNMP  is a helpful link also.
>
>
>
> On Thu, Sep 30, 2021 at 1:56 PM Pushpa Thimmaiah <
> [email protected]> wrote:
>
>> Hi ,
>>
>> I am using net-snmp-5.9 (centos)and  tried following command.  Wireshark
>> says 'Decrypted data not formatted as expected'. [Attached snapshot
>> wireshark.jpeg]
>>   Used same snmpv3 credentials used at agent and wireshark .
>>
>> snmptrap -v 3 -n "" -a MD5 -A mypassword -x AES192 -X mypassword -l
>> authPriv -u testing123 -e 0x8000236e0320b3ae337994 10.12.74.4 69
>> .1.3.6.1.4.1.8072.2.3.1 .1.3.6.1.4.1.8072.2.1.1 i 123456
>>
>> Kindly let me know if anything is missed.
>>
>> Thanks,
>> Pushpa.T
>> _______________________________________________
>> Net-snmp-coders mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
>>
>

_______________________________________________
Net-snmp-coders mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
wireshark_two_traps.png (image/png, 162.3 KB) - not displayed