Re: SOS, how to convert V2 trap to V3 trap?

Am Donnerstag, 24. Juli 2014, 09:08:36 schrieb Olivier Miakinen:
> Hello,
> 
> Le 24/07/2014 03:03, [email protected] a écrit :
> > I have the device A which only sends V2 traps to the device B.  The
> > device B receives V2 traps from the device A and forwards these traps
> > to the device C. My question is how to convert these V2 traps to V3
> > traps, so that the device C receives V3 traps? Does snmptrapd/snmpd
> > provide this function? how to do it?
> 
> I am also interested in the answer.
> 
> In case this is not possible with the snmptrapd/snmpd, did someone
> develop it ?

Yes. I think you need a trapd that receives the trap, calls a script that 
sends out the v3 trap. Should not be too difficult to script it.

But beware! SNMPv3 takes care für correct identification of the devices. 
SNMPv3 uses a SNMPEngineID that is unique for every agent. So your management 
system will think it receives traps from your middle box, NOT from the device 
that originally sent out the trap.

Perhaps you cold fake it (man-in-the-middle attack) but only if the data is 
not authenticated. SNMPEngineID is used to authenticate the data.

Conclusion: Get an agent on the original device that is SNMPv3 capable. Talk 
to the vendor.

Greetings,

-- 
Mit freundlichen Grüßen,

Michael Schwartzkopff

-- 
[*] sys4 AG

http://sys4.de, +49 (89) 30 90 46 64, +49 (162) 165 0044
Franziskanerstraße 15, 81669 München

Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer
Aufsichtsratsvorsitzender: Florian Kirstein

------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iF4EABEIAAYFAlPQsvUACgkQsmtesqLuBDQfbQD/TkgkZWfur0yHBam/XMwo2uKS
aK3O4BnRDlI/x6xxjaUBAKMP6x1Fj16n6Z+zsV/4Ni6g6iRmN8EfL0GSoNQGFMW1
=WhnF
-----END PGP SIGNATURE-----