Handling snmp v3 user authentication manually to implement rate-limiting?

Janne Paalijarvi <[email protected]> Mon, 10 Mar 2025 21:00:49 +0200
Newsgroups gmane.network.net-snmp.user
Message-ID <CA+-shPdwzDZsUhuP-53DtAxfyF-bNJ5+wsHQgcBkyi5OLtMHAw@mail.gmail.com>
--===============7902357520106230103==
Content-Type: multipart/alternative; boundary="000000000000dbf926063001976a"

--000000000000dbf926063001976a
Content-Type: text/plain; charset="UTF-8"

Hello,

Background: I have a C/C++ .so agent module for snmpd. It works correctly.

However, now I am thinking about making it more resistant to brute-forcing.
Lets say I want to block the user if they make 5 failed requests in a row
(a naive example).

I was thinking about capturing the request during auth stage, verifying the
user credentials "manually" (then continuing the normal processing) and
keeping track of failed requests per user.

Is there any possibility using the Net-SNMP to achieve anything like this?
All kinds of ideas are appreciated. Even those needing to extend the
library/snmpd functionality.

Regards,
Janne Paalijarvi

--000000000000dbf926063001976a
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hello,</div><div><br></div><div>Background: I have a =
C/C++ .so agent module for snmpd. It works correctly.</div><div><br></div><=
div>However, now I am thinking about making it more resistant to brute-forc=
ing. Lets say I want to block the user if they make 5 failed requests in a =
row (a naive example).</div><div><br></div><div>I was thinking about captur=
ing the request during auth stage, verifying the user credentials &quot;man=
ually&quot; (then continuing the normal processing) and keeping track of fa=
iled requests per user.<br></div><div><br></div><div>Is there any possibili=
ty using the Net-SNMP to achieve anything like this? All kinds of ideas are=
 appreciated. Even those needing to extend the library/snmpd functionality.=
</div><div><br></div><div>Regards,</div><div>Janne Paalijarvi</div></div>

--000000000000dbf926063001976a--


--===============7902357520106230103==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============7902357520106230103==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

--===============7902357520106230103==--