Simple Network Management Protocol
- https://en.wikipedia.org/wiki/Simple_Network_Management_Protocol
- Gemini
- snmp-check
- SNMP Enumeration
- SNMP Enumeration Countermeasures
- SNMP Commands
- SNMP Trap
- SNMP Community Strings
- Management Information Bases
Tools
Overview
SNMP is widely used in network management systems to monitor network-attached devices such as routers, switches, firewalls, printers, and servers. It consists of a manager and agents. The agent receives requests on port 161 from the managers and responds to the managers on port 162.
SNMP (Simple Network Management Protocol) is a widely-used protocol for monitoring and managing network devices and systems. Despite its name suggesting simplicity, SNMP is quite powerful and comprehensive.
What SNMP Does
SNMP allows network administrators to:
- Monitor network device performance and health
- Collect statistics from routers, switches, servers, and other devices
- Receive alerts when problems occur
- Remotely configure certain device settings
- Gather information about network traffic, errors, and resource utilization
Key Components
SNMP Manager: Software that requests information from network devices (like network monitoring systems)
SNMP Agent: Software running on managed devices that responds to requests and can send alerts
MIB (Management Information Base): A hierarchical database that defines what information can be monitored on each device type
SNMP Operations
GET: Retrieve specific information from a device GET-NEXT: Browse through MIB data sequentially
GET-BULK: Efficiently retrieve large amounts of data SET: Modify configuration values on a device TRAP/INFORM: Unsolicited alerts sent by devices when events occur
SNMP Versions
SNMPv1: Original version, basic functionality, weak security (community strings in plaintext)
SNMPv2c: Added bulk operations and better error handling, still uses community strings
SNMPv3: Added strong authentication and encryption, user-based security
Common Use Cases
- Network monitoring and alerting systems
- Bandwidth utilization tracking
- Server performance monitoring
- Environmental monitoring (temperature, humidity in data centers)
- Inventory management of network devices
- Automated network configuration management
SNMP runs on UDP port 161 for regular operations and port 162 for traps/notifications. It's essential infrastructure for enterprise network management.
Brute Forcing with hydra
hydra -P password-file.txt -v $ip snmp