SNMP

networkingIT support

Simple Network Management Protocol: the decades-old standard for polling device health and counters, and for receiving traps when something breaks.

Version 3 added real authentication and encryption; communities 'public' and 'private' still haunt audits.

SNMP is how most network equipment is monitored, polling counters and sending traps when something changes. Its ubiquity is its strength and its version history is the problem: v1 and v2c authenticate with a community string sent in clear text, which is a password in the same sense that a doormat key is a lock.

v3 adds real authentication and encryption and is widely available and unevenly deployed, because v2c works and changing it touches every device and every monitoring system at once. A read-only community string is often dismissed as harmless, and it is not: the data it exposes is a complete inventory of interfaces, addresses, routes and neighbours, which is precisely the reconnaissance an intruder would otherwise have to work for.

← All glossary entries