Hi Omar, list, don't fear these "packages" ;-)
Wireshark simply does not know about the used Priv Credentials and as the package is encrypted it says "privKey Unknown". You can tell wireshark about your used credentials here: "edit -> preferences -> protocols -> snmp -> users table" ...you must provide the engineID, v3user, authPw and privPw. After having done this you'll be presented with the unencrypted packages. Hope this helps, Marcel On Wed, Oct 28, 2009 at 10:56 AM, <[email protected]> wrote: > > Hi everyone, > > I'm using Spectrum 9.1 on Windows Server 2003 and modelling the devices > through SNMPv3. I've setup SNMPv3 on my router (authenticated and encrypted > (authPriv)). I've also setup SNMPv3 Profile in Spectrum with the same > authentication and encryption data. When I create model by IP address, model > is successfully created and modeled. I use Wireshark to sniff the traffic > between Spectrum and router and there is one message constantly exchanged > between them. It is the 'encryptedPDU: privKey Unknown'. I've tried to > 'google' around but haven't found something helpful about this issue. I'm > using the default MD5 and DES. > > As my router is modeled ok, should this message concern me? Is it something > wrong? > > Srdačan pozdrav / Kind regards, > ___________________ > Omar Izetbegović > Sedam IT d.o.o. > HR - 10 000 Zagreb > Borongajska cesta 81a > Tel: +385 1 2353 738 > Fax: +385 1 2353 707 > Mob: +385 91 2353 738 > www.sedamIT.hr > ---------------------------------- > Napomena: Ova poruka sadrzi podatke povjerljive prirode, iskljucivo > namijenjene osobama oznacenima kao primateljima te se pristup od strane bilo > koje druge osobe smatra neovlastenim. Ukoliko niste oznaceni primatelj, > svaka distribucija, kopiranje, umnozavanje ili otkrivanje sadrzaja trecim > osobama je strogo zabranjeno i smatra se protuzakonitim. Ukoliko ste dobili > ovu poruku, a niste oznaceni primatelj, molimo Vas da sto prije obavijestite > posiljatelja poruke i unistite sve postojece kopije. Ova napomena takodjer > potvrdjuje da je ova elektronicka poruka testirana na postojanje racunalnih > virusa. > > Disclaimer: The information in this email is confidential and it is > intended solely for the addressee. Access to this email by anyone else is > unauthorized. If you are not the intended recipient, any distribution, > copying, duplication or disclosure is prohibited and may be unlawful. If you > have received this email in error, please notify the sender immediately and > destroy it, and all copies of it. This footnote also confirms that this > email message has been swept for the presence of computer viruses. > > - --To unsubscribe from spectrum, send email to [email protected] with > the body: unsubscribe spectrum [email protected] > > --- To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected]
