I was onsite with a customer doing some customized training when they noted that ever since they installed a new Firewall, there are tons of log entries regarding SNMP. They explained that they knew what SNMP was used for; network monitoring and management. They went on to mention that the IP’s in the logs are basically everyone in the company they are at a loss as to what could be causing this.
In this video I show you what we did to get to the bottom of this using a protocol analyzer (Wireshark). The important part of this methodology is that I followed my steps of; identifying the problem, making one change, and re-measuring for its impact. This is so critical since some of the online suggestions did not help me.