為了要測試siem

需要起 snmptrap

找了二個方法

第一個方法是直接用 zabbix_trap_receiver.pl

但有問題起不來

https://zhuanlan.zhihu.com/p/426390981

第二個方法是直接改 /etc/snmp/snmptrapd.conf

內容如下

# Example configuration file for snmptrapd

#

# No traps are handled by default, you must edit this file!

#

disableAuthorization yes

authCommunity   log,execute,net public

[snmp] logOption s 2

[snmp] logOption f /tmp/snmptrapd-direct.log

format2 %V\n% Agent Address: %A \n Agent Hostname: %B \n Date: %H - %J - %K - %L - %M - %Y \n Enterprise OID: %N \n Trap Type: %W \n Trap Sub-Type: %q \n Community/Infosec Context: %P \n Uptime: %T \n Description: %W \n PDU Attribute/Value Pair Array:\n%v \n -------------- \n

systemctl restart snmptrapd

醬就可以了