Listen to all traps on port 162 and log it

[Mr Zer0]

Hi all,

I want to log all the events coming on HPUX server on port 162 in a log file or atleast i should be able to view it. Is it possible?

[Torsten.]

This is exactly what a snmp daemon should do - do you run such a specific application?

[Mr Zer0]

No i think, just the HPUX OS is installed, nothing else, do we have to install something like wireshark for that?

And what would happen if one of my application is already using 162, can the new application still listen to the traps on that port?

[Torsten.]

You need a special (SNMP) application for receiving, decoding (keyword MIB) and managing traps.

[Mr Zer0]

I do not want to know the meaning of the trap(MIB), i just want to know from what IP's traps are coming. Can i do that directly in HPUX or i should install an application for that.

[Torsten.]

OID and IP are included in a trap header, so your application need to decode this.

[Viktor Balogh · Accepted solution]

"I do not want to know the meaning of the trap(MIB), i just want to know from what IP's traps are coming."

then what about tcpdump? e.g.:

# tcpdump -w tcpdump.out -C 100 -q -n -i lan5 'port 162'

[Mr Zer0]

Thank you,

i used tcpdump

[Mr Zer0]

`