We have updated our Terms of Service, Code of Conduct, and Addendum.

SNMP Trap Forwarding Question

jccurtis
jccurtis Posts: 3 ✭
in General Discussions

If I need to accept an SNMP trap from a source, and send it to multiple trap destinations, will Cribl spoof the source IP and send the trap “un-altered” to the final destinations? Meaning will it preserve the source IP address from the original trap IP header?

Best Answer

  • simonisjoshua
    simonisjoshua Posts: 2 ✭
    edited July 2023 Answer ✓

    Hey,
    Cribl will receive the trap as per config, and any pre, pro or post processing is in your hands.

    The message should be sent on with the original source ip in the message, however the receving syslog sources will define if it uses this or the host sending the message.
    See here for more info:

    Syslog | Cribl Docs

    Send out data over syslog via TCP or UDP

Answers

  • simonisjoshua
    simonisjoshua Posts: 2 ✭
    edited July 2023 Answer ✓

    Hey,
    Cribl will receive the trap as per config, and any pre, pro or post processing is in your hands.

    The message should be sent on with the original source ip in the message, however the receving syslog sources will define if it uses this or the host sending the message.
    See here for more info:

    Syslog | Cribl Docs

    Send out data over syslog via TCP or UDP

Categories