Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <c25d9b24-d759-430b-98ab-71cc1cd483e7@gmail.com>
Date: Tue, 3 Jun 2025 10:53:20 +0200
From: Albert Veli <albert.veli@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: SNMPv3 format

I'll add two pcap-files for clarity.

On 2025-06-03 10:02, Albert Veli wrote:
>
> There is a format for SNMPv3 in the john source here:
> https://github.com/openwall/john/blob/bleeding-jumbo/src/snmp_fmt_plug.c
>
snmpv3_unencrypted_user_albert_auth_md5.pcap was created with the command:

snmpwalk -v3 -l authNoPriv -u albert -a MD5 -A iloveyou 198.18.1.1 
1.3.6.1.2.1.1.1.0

Only authentication, no privacy protocol (encryption).

snmpv3_user_albert_auth_md5_aes128.pcap was created with:

snmpwalk -v3 -l authPriv -u albert -a MD5 -A iloveyou -x AES-128 -X 
princess 198.18.1.1 1.3.6.1.2.1.1.1.0

Here I turned on encryption on the device with a second passphrase 
(princess).

The OID is sysDescr which should contain a textual description of the 
device. This is good for testing.
https://oidref.com/1.3.6.1.2.1.1.1
Download attachment "snmpv3_user_albert_auth_md5_aes128.pcap" of type "application/vnd.tcpdump.pcap" (1128 bytes)

Download attachment "snmpv3_unencrypted_user_albert_auth_md5.pcap" of type "application/vnd.tcpdump.pcap" (1092 bytes)

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.