SNMP Scanner

briane2525 · 2012-09-17T13:02:15.000Z

Are there any reports that will simply list all my devices and it’s associated SNMP string?

mel9484 · 2012-09-17T13:34:02.000Z

Currently, I think these are the only 2 reports related to SNMP available in spiceworks:

http://community.spiceworks.com/reports/1550

http://community.spiceworks.com/reports/2443

Do you have multiple strings?

briane2525 · 2012-09-17T13:40:33.000Z

Thanks, I’ll check those out. Basically for audit reasons I need to list and change all the devices with the string public or private or disable SNMP all together.

mel9484 · 2012-09-17T13:50:40.000Z

How about creating a new network scan for a particular string (say public) and see which devices respond to that? Not sure if that will work well but worth a try.

aaron-m-spiceworks · 2012-09-17T14:57:54.000Z

I think Mel’s method would be the best, the SNMP community strings aren’t actually stored in the database.

If you create a new range and then do a scan now on just that range (via the down arrow on the right of the range), then there’ll be a finder_cust log created which you can open in a text editor to see if any devices accepted public as the authentication string.

Another possibility is to run an snmpwalk against all the IP addresses that you suspect may have a public community string. There’s a batch file in that link that could be edited to loop through the addresses. If the resulting log file contains device information, then it responded to the community string.

briane2525 · 2012-09-18T18:28:10.000Z

Thanks for the replies guys, I think I’m just going to put the SolarWinds Engineers Toolkit in next years budget… getting dinged on this crap in my Audit every year.