Re:
Pushpa Thimmaiah <[email protected]> Fri, 1 Oct 2021 19:19:27 +0530
| Newsgroups | gmane.network.net-snmp.devel |
|---|---|
| Message-ID | <CAASqVJUAhDokpxHppzW6v72pJNtO84tPjVnrsp4grQumVGSDhQ@mail.gmail.com> |
Hi Larry Hayes, Yes. I have configured wireshark properly. I have configured the wireshark to accept trap of credentials MD5+128 just to verify settings are correct. root# root:~# snmptrap -v 3 -n "" -a MD5 -A mypassword -x *AES128* -X mypassword -l authPriv -u putest128 -e 0x8000236e0300b0ae037994 10.12.73.118 "" .1.3.6.1.4.1.8072.2.3.1 .1.3.6.1.4.1.8072.2.1.1 i 22222 <----------- decrypt properly root:~# snmptrap -v 3 -n "" -a MD5 -A mypassword -x *AES192* -X mypassword -l authPriv -u putesting -e 0x8000236e0300b0ae037994 10.12.73.118 "" .1.3.6.1.4.1.8072.2.3.1 .1.3.6.1.4.1.8072.2.1.1 i 123456 <--------- Throws 'Decrypted data not formatted as expected' error root:~# Attached wireshark snapshot for these two traps. On Fri, Oct 1, 2021 at 1:34 AM Larry Hayes <[email protected]> wrote: > Are you sure you have Wireshark setup correctly to decrypt the messages? > > WireShark: > Edit -> Preferences -> Protocols -> SNMP -> Users Table > > https://wiki.wireshark.org/SNMP is a helpful link also. > > > > On Thu, Sep 30, 2021 at 1:56 PM Pushpa Thimmaiah < > [email protected]> wrote: > >> Hi , >> >> I am using net-snmp-5.9 (centos)and tried following command. Wireshark >> says 'Decrypted data not formatted as expected'. [Attached snapshot >> wireshark.jpeg] >> Used same snmpv3 credentials used at agent and wireshark . >> >> snmptrap -v 3 -n "" -a MD5 -A mypassword -x AES192 -X mypassword -l >> authPriv -u testing123 -e 0x8000236e0320b3ae337994 10.12.74.4 69 >> .1.3.6.1.4.1.8072.2.3.1 .1.3.6.1.4.1.8072.2.1.1 i 123456 >> >> Kindly let me know if anything is missed. >> >> Thanks, >> Pushpa.T >> _______________________________________________ >> Net-snmp-coders mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/net-snmp-coders >> > _______________________________________________ Net-snmp-coders mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
wireshark_two_traps.png
(image/png, 162.3 KB) - not displayed