Snort and Cacti Error "SNMP missing community string attempt"

[Alan Barnes <abarnes () bulletmail net>]

All,

Can any one tell me why I might be getting an "SNMP missing community string
attempt" from Snort?

I am running Cacti to gather and aggregate server statistics for me
(version 8.5). It utilizes SNMP to to this. I continually get the following
error in my logs:

#36-(1-161609)        [cve][icat][snort] SNMP missing community string attempt  
     2004-06-15 12:01:08        192.168.1.5:33120        192.168.1.3:161

The source ip address is my Redhat Linux 9.0 machine with Cacti and Snort. In
this case, it is polling a windows machine on my network. The destination can
change in the error depending on the server that is being polled. The community
name is configured on all devices and I get no errors in Cacti.

Here is part of the error message.

Payload   length = 44

000 : 30 2A 02 01 01 04 06 73 65 63 72 65 74 A0 1D 02   0*.....secret...
010 : 04 00 EB 9A 45 02 01 00 02 01 00 30 0F 30 0D 06   ....E......0.0..
020 : 09 2B 06 01 02 01 19 01 05 00 05 00               .+..........


As you can see from this entry in the error message. My community name is
configured. Please help me, if you can.



Regards,


Alan
--------------------------------------------
Virus Scanned by http://mail.bulletmail.net



-------------------------------------------------------
This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference
Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer
Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA
REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users