nanog mailing list archives
RE: SNMP probers
From: "Chris A. Icide" <chris () nap net>
Date: Wed, 9 Apr 1997 11:34:01 -0500
I would suspect a good portion of these are run-away enterprise autodiscover jobs. As for what to do? Obviously, education would help alot, but, we all know how successful that is in this industry with the number of new folks getting involved every day. If I remember right, Proteon routers allowed you to specify what interfaces would accept SNMP queries. You could do something of the same with an access-list on a cisco thats not heavily used. I also believe that the Cisco routers do allow you to apply an access list to your SNMP config, but this won't prevent your router from receiving the request and expending CPU trying to figure out what to do with it. What do we do about it? Grumble. Make a phone call here and there if it gets out of hand. Chris ---------- From: Randy Bush[SMTP:randy () psg com] Sent: Wednesday, April 09, 1997 9:28 AM To: nanog () merit edu Subject: SNMP probers What do folk do about persistent SNMP probers? I.e. j random clueless sites which keep querying one's backbone router(s). E.g. this morning I get the NOC shift change report with the folk hammering on our routers as if we were stupid enough to use 'public' as the community string.
mae-east Bad community string from 194.168.51.4 mae-east Bad community string from 193.38.113.216 mae-west Bad community string from 202.85.254.5 mae-west Bad community string from 206.79.240.190 mae-west Bad community string from 193.38.113.216 pdx Bad community string from 204.119.24.200 pen Bad community string from 164.117.144.245 pen Bad community string from 193.38.113.216 paix Bad community string from 204.79.240.190
So every day some poor NOC person has to search these folk down with the great tools we have, send email, get told they're nazi idiots, ... So what do folk do about this? randy - - - - - - - - - - - - - - - - -
Current thread:
- SNMP probers Randy Bush (Apr 09)
- Re: SNMP probers Todd Graham Lewis (Apr 09)
- Re: SNMP probers Randy Bush (Apr 09)
- Re: SNMP probers Lyndon Levesley (Apr 09)
- Re: SNMP probers Michael Dillon (Apr 09)
- Re: SNMP probers Scott M. Ballew (Apr 09)
- <Possible follow-ups>
- RE: SNMP probers Chris A. Icide (Apr 09)
- RE: SNMP probers Dave O'Shea (Apr 09)
- RE: SNMP probers Randy Bush (Apr 09)
- Re: SNMP probers Bill McCauley (Apr 09)
- Re: SNMP probers Daniel McRobb (Apr 09)
- Re: SNMP probers Mat Miller (Apr 12)
- Re: SNMP probers Lyndon Levesley (Apr 12)
- Re: SNMP probers Neil J. McRae (Apr 12)
- Re: SNMP probers Deepak Jain (Apr 12)
- Re: SNMP probers Peter (Apr 12)
- Re: SNMP probers Lyndon Levesley (Apr 12)
- Re: SNMP probers Todd Graham Lewis (Apr 09)