Found a simple SNMP trap receiver for windows that writes traps to a file for Splunk

[cpt12tech]

http://www.bttsoftware.co.uk/snmptrap.html

Found a simple SNMP trap receiver for windows that writes traps to a file for Splunk.

After many hours spent with SNMP modular input and Net-SNMP with little to no success, found this app. Simple. Elegant. And so far haven't had to install any custom MIBs, which were giving me lots of trouble trying to implement in the other options.
It's free, and considering how long I spent troubleshooting totally worth sending a donation to the developer. Wish I had known about this months ago. Haven't worked with the data in Splunk yet. Time will tell if this is an effective solution. Even if the app isn't used for ingesting into Splunk, it's a great way to see OIDs.

Hope this helps someone else.

The output log file includes the description in a pipe | delimited file, so very easy to parse with splunk.
4/17/2017 | 16:56:39 | 192.168.1.220 | (v2)INPUT A - Video 12 - embedded audio 1 Silence Left
4/17/2017 | 16:56:40 | 192.168.1.91 | (G) Cold Start
4/17/2017 | 16:56:45 | 192.168.1.220 | (v2)INPUT A - Video 12 - embedded audio 1 Silence Left
4/17/2017 | 16:56:52 | 192.168.1.220 | (v2)INPUT A - Video 12 - embedded audio 1 Silence Right
4/17/2017 | 16:56:55 | 192.168.1.91 | (G) Link Up
4/17/2017 | 16:56:55 | 192.168.1.220 | (v2)INPUT A - Video 14 - embedded audio 1 Silence Left
4/17/2017 | 16:56:59 | 192.168.1.220 | (v2)INPUT A - Video 14 - embedded audio 1 Silence Right
4/17/2017 | 16:56:59 | 192.168.1.220 | (v2)INPUT A - Video 12 - embedded audio 1 Silence Left

You can see the associated OIDs and even raw data. Not in the log file but in the window of the app.

0010 D1 02 03 24 F7 86 02 01 00 02 01 00 30 81 C3 30 ...$........0..0
0020 10 06 08 2B 06 01 02 01 01 03 00 43 04 3E CE 19 ...+.......C.>..
0030 3E 30 1A 06 0A 2B 06 01 06 03 01 01 04 01 00 06 >0...+..........
0040 0C 2B 06 01 04 01 9E 20 15 03 02 03 01 30 38 06 .+..... .....08.
0050 0E 2B 06 01 04 01 9E 20 15 03 02 02 01 04 69 04 .+..... ......i.
0060 26 49 4E 50 55 54 20 41 20 2D 20 56 69 64 65 6F &INPUT A - Video
0070 20 20 31 34 20 2D 20 65 6D 62 65 64 64 65 64 20 14 - embedded
0080 61 75 64 69 6F 20 31 30 13 06 0E 2B 06 01 04 01 audio 10...+....
0090 9E 20 15 03 02 02 01 03 69 02 01 01 30 14 06 0E . ......i...0...
00A0 2B 06 01 04 01 9E 20 15 03 02 02 01 05 69 02 02 +..... ......i..
00B0 75 30 30 1B 06 0B 2B 06 01 04 01 9E 20 15 08 01 u00...+..... ...
00C0 00 04 0C 53 69 6C 65 6E 63 65 20 4C 65 66 74 30 ...Silence Left0
00D0 11 06 0B 2B 06 01 04 01 9E 20 15 08 02 00 02 02 ...+..... ......
00E0 75 30 u0

Frame Length: 226 bytes
Version: SNMPv2
Community: public
PDU Type: Trap v2
Request ID: 24F786
Error Status: 0
Error Index: 0
OID: .1.3.6.1.2.1.1.3.0
ASN.1 Type: Time Ticks 0x43 (67)
Value: 121 days, 22:55:42
OID: .1.3.6.1.6.3.1.1.4.1.0
ASN.1 Type: Object ID 0x06 (6)
Value: .1.3.6.1.4.1.3872.21.3.2.3.1
OID: .1.3.6.1.4.1.3872.21.3.2.2.1.4.105
ASN.1 Type: Octet String 0x04 (4)
Value: INPUT A - Video 14 - embedded audio 1
OID: .1.3.6.1.4.1.3872.21.3.2.2.1.3.105
ASN.1 Type: Integer32 0x02 (2)
Value: 1
OID: .1.3.6.1.4.1.3872.21.3.2.2.1.5.105
ASN.1 Type: Integer32 0x02 (2)
Value: 30000
OID: .1.3.6.1.4.1.3872.21.8.1.0
ASN.1 Type: Octet String 0x04 (4)
Value: Silence Left
OID: .1.3.6.1.4.1.3872.21.8.2.0
ASN.1 Type: Integer32 0x02 (2)
Value: 30000

[cpt12tech · Accepted solution]

http://www.bttsoftware.co.uk/snmptrap.html