SNMP Trap Listener
SNMP Trap Listener receives SNMP v2c and authenticated SNMPv3 traps or informs on a local UDP port and converts accepted notifications into Banalytics events.
Bind one listener and control its sources
Configure a local bind address and UDP port, permit the required protocol versions, then configure network devices to send traps or informs to the Banalytics host. The default privileged port 162 can require operating-system capabilities or elevated service permissions; use a permitted alternative port when required by the deployment.
Limit network exposure
Bind to the intended interface and restrict inbound UDP traffic at the host or network firewall.
Choose accepted senders
Use the source allowlist and, when appropriate, ignore notifications that cannot be mapped to a configured SNMP Device.
Verify informs
Informs are acknowledged after processing. Test the sender’s retry and acknowledgement behaviour before relying on them for alarms.
Configuration parameters
| Parameter | Required | Description | Default |
|---|---|---|---|
Title | Yes | Display name for the listener. | None |
Bind address | Yes | Local address used by the UDP listener. | 0.0.0.0 |
Port | Yes | Local UDP port. | 162 |
Accept v2c | Yes | Accept SNMP v2c notifications. | Enabled |
Accept v3 | Yes | Enable SNMPv3 USM processing. | Disabled |
Allowed sources | Optional | Comma- or newline-separated source IP addresses or prefixes. Empty accepts all sources subject to the unknown-sender rule. | Empty |
Ignore unknown senders | Yes | Drops notifications whose source IP does not match a configured SNMP Device. | Disabled |
Deduplication window | Yes | Suppresses repeated notifications with the same source, trap OID and bindings. Zero disables deduplication. | 2000 ms |
V3 username | V3 | SNMPv3 security name accepted by this listener. | None |
V3 security level | V3 | NO_AUTH_NO_PRIV, AUTH_NO_PRIV or AUTH_PRIV. | AUTH_PRIV |
V3 authentication | Conditional | Authentication protocol and password. The password supports ${secret:alias}. | SHA1 |
V3 privacy | Conditional | Privacy protocol and password. The password supports a Secret Manager reference. | AES128 |
Receive a bounded notification record
Each accepted notification emits SnmpTrapReceivedEvent with the trap OID, source address, protocol version, uptime, inform flag, variable bindings and the mapped SNMP Device UUID when one is found. Community, authentication and privacy credentials are never included.
Trap
A one-way notification. Delivery is not acknowledged by the listener.
Inform
An acknowledged notification. The listener returns a response after processing.
Device mapping
Source IP can be associated with a configured SNMP Device for downstream rules.
Reduce noise and protect the boundary
Keep the deduplication window long enough to absorb sender retries but short enough to preserve legitimate repeated state changes. Route high-volume traps through narrow Event Manager rules and retention policies so one noisy device cannot overwhelm event history or notifications.