SNMPTRAP: Unexpected Reply

This protocol anomaly triggers when it detects a SNMP Manager reply. SNMP trap is a one-way messaging protocol and the server should not send replies. This can indicate tunneling over the SNMP trap port.

Extended Description

A reply to an SNMP TRAP message is a protocol anomaly. It could indicate that a nonstandard SNMP management station is being used on the server side, or that other software is using the SNMP service port for tunneling.

Short Name
SNMPTRAP:ERROR:UNEXPECTED-REPLY
Severity
Major
Recommended
True
Recommended Action
Drop Packet
Category
SNMPTRAP
Release Date
04/22/2003
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
False Positive
Unknown

Found a potential security threat?