Simple Network Management Protocol

Handle change in settings remotely

Includes: Routers, Switches, Servers, IoT etc.

MIB: Management Information Base, Store device info (text file / DB)

Written using Abstract Syntax Notation One (ASN.1)

OID Tree

Community Strings: ~= Passwords determining if info can be viewed or not → Problem: Not encrypted when not v3, and transmitted at each access

Dangerous Settings

Settings Description
rwuser noauth Provides access to the full OID tree without authentication.
rwcommunity <community string> <IPv4 address> Provides access to the full OID tree regardless of where the requests were sent from.
rwcommunity6 <community string> <IPv6 address> Same access as with rwcommunity with the difference of using IPv6.

Footprint tools: snmpwalk, onesixtyone, braa

(query OID information)