protocol show as UDP instead of SNMP

retag add tags

I have a small pcap of an snmp v3 report then get for sysUpTime.0
I've added the right v3 username, encryption and privacy protocols and their respective passwords into the User Table under preferences->SNMP
I've added the path to the MIB directory.
But Wireshark doesn't appear to recognise the data as SNMP.
When I open the pcap, the Protocol column shows as UDP, not SNMP.
I tried right click -> decode as ... and looked for SNMP, in the list of Current values, but it isn't there.
I've uninstalled and reinstalled WS, I am on the latest version.
What am I doing wrong?

mikodell

asked 2019-04-03 07:45:00 +0000

edit flag offensive 0 remove flag close merge delete

Comments

You may also get an answer faster if you provide a link to the packet capture (hosted on dropbox, gdrive, etc.).

Ross Jacobs (2019-04-03 13:56:04 +0000) edit

I tried right click -> decode as ... and looked for SNMP, in the list of Current values, but it isn't there.

So you right clicked on a UDP packet, popped up "Decode As...", double-clicked the "Current" column in the new row, and clicked on the right-hand end of the item that showed up, and the scrollable list doesn't have SNMP but has other protocols?

Guy Harris (2019-04-03 21:15:35 +0000) edit

add a comment see more comments

Comments

Thank you grahamb SNMP was the only protocol unchecked in Analzye->Enabled protocols 🤦‍♂️

mikodell (2019-04-04 00:31:35 +0000) edit

@mikodell, Great, if an answer has solved your issue, please accept it so others will know that by checking the checkmark icon to the left pf the answer.

grahamb (2019-04-04 09:26:03 +0000) edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

protocol show as UDP instead of SNMP edit

Comments

1 Answer

Comments