Docs
test1test2
6.5
6.5
  • ElastiFlow Documentation
  • Unified Flow Collector
    • General Configuration
    • Changelog
    • Maxmind GeoIP2 and GeoLite2
    • RiskIQ PassiveTotal
    • Network Interfaces
    • User-Defined Metadata
    • Docker
    • Linux
    • Unified Flow Collector Introduction
    • System Requirements
    • Supported IEs
    • AWS VPC Flow Log IEs
    • IPFIX IEs
    • Netflow IEs
    • sFlow IEs
  • Unified SNMP Collector
    • Device Groups
    • Changelog
    • Devices
    • Downloading Definitions
    • Enumerations
    • Objects
    • Object Groups
    • User-Defined Metadata
    • Docker
    • Network Interfaces
    • United SNMP Collector Introduction
    • Linux
    • Scheduling Rediscovery
  • Monitoring ElastiFlow
    • Liveness & Readiness
    • Metrics
    • Prometheus & Grafana
  • Configuration Reference
    • YAML Configuration Files
    • Configuration Reference Overview
    • Common
      • API
      • Licensing
      • Overview
      • Logging
      • HTTP output
      • Elasticsearch output
      • Kafka output
      • Monitor output
      • OpenSearch output
      • Splunk output
      • stdout output
      • Processor
    • Unified Flow Collector
      • Overview
      • Community/Conversation IDs
      • EF_PROCESSOR_ENRICH_TOTALS_IF_NO_DELTAS
      • Overview
      • RiskIQ PassiveTotal
      • Maxmind
      • User-Defined Metadata
      • Overview
      • Overview
      • User-Defined Metadata
      • Overview
      • Benchmark Input
      • Netflow/IPFIX/sFlow (UDP)
      • Licensing
      • Decoder/Processor
      • Sample Rate
      • Configuration Changes
    • Unified SNMP Collector
      • User-Defined Metadata
      • Overview
      • Licensing
      • SNMP Poller
      • EF_PROCESSOR_SNMP_ENUM_DEFINITIONS_DIRECTORY_PATH
  • API Reference
    • API Reference Overview
    • SNMP Operations
  • Data Platforms
    • Elastic
      • Basic Cluster
      • Advanced Cluster
      • Single Server
      • Multi-Tier Cluster
      • Single "Lab" Server
      • Elasticsearch
      • ElastiFlow vs. Filebeat and Logstash
      • RHEL/CentOS
      • Ubuntu/Debian
      • Kibana
      • ML
        • Network Security
        • Machine Learning
        • Availability
          • Network Availability
          • DHCP
          • LDAP
          • DNS
          • NTP
          • RADIUS
          • TCP Sessions
        • Network Security Activity
          • Rare Autonomous System
          • Network Activity
          • Rare Conversation
          • Rare Geolocation
        • Network Security Brute Force
          • Brute Force CLI Access
          • Brute Force Remote Desktop Access
          • Brute Force Attacks
        • Network Security DDoS
          • Denial-of-Service
          • ICMP Flood Attack
          • SYN Flood Attack
          • TCP DDoS Attack
          • UDP Amplification Attack
        • Network Security Recon
          • ICMP Scan
          • Reconnaissance
          • Port Scan
        • Performance
          • Unusual ASN Traffic Volume
          • Unusual Network Interface Traffic Volume
          • Network Performance
    • Opensearch
      • Dashboards
      • Auth Sig V4
    • Splunk
      • Default Search Macro
      • Configuring Data Input & Index
      • Splunk App Installation
    • Output Configuration
  • Additional Guides
    • Catalyst (sFlow)
    • FortiGate
    • hsflowd
    • Configuring Flow Sampling on Juniper Routers
    • Junos OS (sFlow)
    • MikroTik RouterOS
    • OpenWRT (softflowd)
    • Ubiquiti EdgeRouter
    • SonicWall
    • Junos OS
    • Extending SNMP Device Support
    • Flow Device Support Overview
    • SNMP Device Support Overview
    • Generating A Support Bundle
  • FAQ
    • Flows stopped showing up in Kibana (Disk(s) Full)
    • Common reasons why you have discrepancies between ElastiFlow data & reality
    • What Are Snapshots?
    • Importing the wrong dashboards (No data)
  • Knowledge Base
    • Config
      • Elasticsearch Authentication Failure
      • CA Certificate Path Incorrect
      • license/error Invalid Segments
    • Flow
      • Bidirectional Flow Support
      • Configure the UDP Input
      • Flow Records Not Received
      • Netflow v9/IPFIX Template Not Receieved
      • Unsupported sFlow Structures
    • General
      • License Has Expired
      • License Agreement Not Accepted
    • Install
      • .deb Upgrade Fails File Overwrite
    • Operation
      • Flow Collector Queues 90% Full
      • Dashboard Updates
      • Change elastiflow-* Index Name?
  • Elastic Stack Deployment
  • Download Links
Powered by GitBook
On this page
  • snmpwalk
  • Installation
  • Usage
  • Configuration
  1. Additional Guides

Extending SNMP Device Support

PreviousJunos OSNextFlow Device Support Overview

We would like to invite you to use our SNMP Walk binary to extend your device support and share its data with us. This tool is designed to perform an SNMP walk on your target device and save the result in a specified file format. By utilizing this tool, you can help us better understand your device's capabilities and optimize our support for it. The SNMP Walk binary supports SNMP versions 1, 2c, and 3.

Once you have completed the SNMP walk and saved the results, please share the gob output file with our team. Community and Basic users should reach out to us on the ElastiFlow Community Slack. Standard and Premium users should reach us at . Our experts will analyze the data and work on enhancing the support for your specific device.

If you have any questions or need assistance with using the SNMP Walk binary, please do not hesitate to reach out to our team. We appreciate your contribution to improving our device support and look forward to working with you.

snmpwalk

The ElastiFlow SNMP Walk binary is a command-line application that performs an SNMP walk on a target device and saves the result in a specified file format. The application supports SNMP versions 1, 2c, and 3.

Installation

The ElastiFlow SNMP Walk binary can be installed natively on Linux. Packages are currently provided for and supported on the Linux distributions and versions listed in the following table.

Distribution
Versions

Ubuntu/Debian

18.04 LTS, 20.04 LTS, 22.04 LTS

RHEL/CentOS

7.x, 8.x

Ubuntu/Debian Installation (deb)

The Debian package for the SNMP Walk package can be downloaded from . It can be used for installation on most Debian-based systems such as Debian and Ubuntu.

Downloading the .deb Package

The package can be easily downloaded using wget or curl:

wget https://elastiflow-releases.s3.us-east-2.amazonaws.com/snmp-walk/snmp-walk_6.4.2_linux_amd64.deb
curl https://elastiflow-releases.s3.us-east-2.amazonaws.com/snmp-walk/snmp-walk_6.4.2_linux_amd64.deb --output snmp-walk_6.4.2_linux_amd64.deb

Installing the Package

There are two methods to install SNMP Walk package, apt or dpkg.

Using apt

sudo apt install ./snmp-walk_6.4.2_linux_amd64.deb

Using dpkg

sudo dpkg -i snmp-walk_6.4.2_linux_amd64.deb

RedHat/CentOS Installation (rpm)

Downloading the .rpm Package

The package can be easily downloaded using wget or curl:

wget https://elastiflow-releases.s3.us-east-2.amazonaws.com/snmp-walk/snmp-walk-6.4.2-1.x86_64.rpm
curl https://elastiflow-releases.s3.us-east-2.amazonaws.com/snmp-walk/snmp-walk-6.4.2-1.x86_64.rpm --output snmp-walk-6.4.2-1.x86_64.rpm

Installing the .rpm Package

The SNMP Walk package can be installed using yum.

Install/Upgrade the Package

If installing the SNMP Walk package for the first time, i.e. NOT upgrading, run the following:

sudo yum install -y snmp-walk-6.4.2-1.x86_64.rpm

If upgrading from a previously installed Unified SNMP Walk package, run the following:

sudo rpm -Uhv snmp-walk-6.4.2-1.x86_64.rpm

Usage

To use the SNMP Walk binary, run the following command:

snmpwalk [flags]

Configuration

The following flags are available for the SNMP Walk binary:

Flag
Description
Value

-ip

The IP address of the device to which SNMP requests will be sent.

127.0.0.1

-port

The UDP port on which the device listens for SNMP requests.

161

-filename

The filename of the SNMP walk results.

snmp.walk

-root-oid

The root OID used to walk an SNMP device.

.1.3.6

-auth-oid

The OID used to perform an authorization check against on an SNMP device.

.1.3.6.1.2.1.1.3.0

-output-text

When output text is true, snmpwalk will write a human-readable output file.

false

-version

Specifies the SNMP version to use when polling this device. Valid values are: 1, 2c, 3.

1

-community

If version is 1 or 2c, a community must be provided. The community of the device that is added to an SNMP request.

-timeout

The time to wait, in milliseconds, for a response to an SNMP request.

3000

-retries

The number of times to retry a failed SNMP request before the task is cancelled.

2

-exponential-timeout

Defines whether the timeout interval should remain static (false) for each retry, or increase exponentially (true).

false

-max-repetitions

The maximum number of repetitions to use when polling an SNMP device. This value is used to set the max-repetitions field in the SNMP GETBULK request.

64

-authoritative-engine-id

The authoritative engine ID used to make an SNMP request with SNMPv3.

-authoritative-engine-boots

The authoritative engine boots used to make an SNMP request with SNMPv3.

0

-authoritative-engine-time

The authoritative engine time used to make an SNMP request with SNMPv3.

0

-username

The username used to authenticate with the device using SNMPv3.

-authentication-parameters

The authentication parameters used to make an SNMP request with SNMPv3.

-privacy-parameters

The privacy parameters used to make an SNMP request with SNMPv3.

-authentication-protocol

The authentication protocol used to authenticate the username with the device using SNMPv3.

-privacy-protocol

The privacy protocol used to encrypt SNMPv3 traffic between the SNMP input and the device.

-authentication-passphrase

The authentication passphrase used to authenticate the username with the device using SNMPv3.

-privacy-passphrase

The privacy passphrase used to encrypt SNMPv3 traffic between the SNMP input and the device.

-secret-key

The secret key used to make an SNMP request with SNMPv3.

-privacy-key

The privacy key used to make an SNMP request with SNMPv3.

The RPM package for the SNMP Walk package can be downloaded from . It can be used for installation on most RedHat-based systems such as RHEL and CentOS.

support@elastiflow.com
here
here