SNMP

Network Management Protocol

SNMP (Simple Network Management Protocol) is the dominant protocol for monitoring and managing network devices such as routers, switches, servers, and printers. A management station (NMS) queries SNMP agents running on devices to retrieve status information — interface traffic counters, CPU load, memory usage, temperature — or to set configuration values. SNMP also supports Traps: unsolicited alerts sent by devices to the NMS when notable events occur, such as an interface going down.

MIB and OID Structure

All data accessible via SNMP is organized in a hierarchical tree called the Management Information Base (MIB). Each data point has a globally unique Object Identifier (OID) — a dotted numeric path like 1.3.6.1.2.1.2.2.1.10 (ifInOctets, inbound bytes on an interface). Vendors publish proprietary MIBs for device-specific metrics in addition to the standard RFC-defined MIBs. The NMS must have the MIB files loaded to translate OIDs into human-readable names.

Security Versions

SNMPv1 and v2c use a shared "community string" (essentially a plain-text password) for authentication, with no EncryptionThe process of converting plaintext data into ciphertext using a cryptographic algorithm and key, making it unreadable without the corresponding decryption key. The foundation of secure communication on the internet. of traffic. These versions are still widely deployed but are vulnerable to interception and should only be used on isolated management networks. SNMPv3 introduced user-based authentication with MD5 or SHA and optional EncryptionThe process of converting plaintext data into ciphertext using a cryptographic algorithm and key, making it unreadable without the corresponding decryption key. The foundation of secure communication on the internet. of the payload with AES or DES. Any internet-facing or multi-tenant environment should use SNMPv3. SNMP runs on UDPUser Datagram Protocol. A connectionless transport protocol that sends datagrams without establishing a connection or guaranteeing delivery. Faster than TCP, it is preferred for real-time applications like DNS queries, VoIP, gaming, and streaming. port 161 for queries and 162 for traps.