Snort using SNMP traps

[Christopher Lyon <cslyon () netsvcs com>]

Hello all,
I have Snort 1.8.7 running on RH7.3 with ucd-snmp 4.2.5. I have been trying
to get traps working correctly from the snort box to our SNMP manager and
from what I can tell the MIB files are just for polling the status of the
Snort box. There are no alerts or events that reference a standard SNMP
trap. This is at least what our SNMP manager is telling me. Does anybody
have SNMP on a snort box working with traps? If so, am I missing something?
I know that the traps are getting to the SNMP manager but there isn't
anything that it can classify the traps with based on the MIB content.
Anybody with any thoughts on this would be greatly appreciated.


BTW, I have these MIBS loaded, SnortIDAlertMIB and SnortCommonMIB.