Network Management

How to verify if SNMP traps are received by your SolarWinds Platform server

This article describes how to verify if you configured traps correctly to be sent to your SolarWinds Platform server.

First published date

10/15/2018 6:11 PM

Last published date

5/12/2025 3:53 PM

Overview

Customers may not see the traps that they are sending in the SolarWinds Platform. The steps here are to check if the traps are showing in Wireshark.

Product section

Network Performance Monitor

Resolution

Requirements to receive Syslog and Traps from a Node:
Node must be added in Orion first to receive the Traps or Syslog Minimum ICMP and better with SNMP or Agent 

  1. Download Wireshark and install the software on your Orion server.  
  2. Ensure that Windows Firewall is disabled on your Orion server. Otherwise, create a rule in Windows Firewall to allow traffic through port 162.
    Windows Firewall may block traffic to the trap service, even when traffic displays in a Wireshark trace. 
  3. Open Wireshark.
  4. In the Filter field, enter: 
    ip == AA.AAA.A.AA && udp.port ==162
where AA.AAA.A.AA represents the test node IP address.

Or for any Target Node
udp.port ==162
     Sample Image
     
  5. All UDP traffic is now filtered between your server and the problem node.
  6. Verify that the device (such as a Cisco or Juniper device) is configured correctly to send traps to your Orion server. See How to forward incoming SNMP trap messages to another server for details. 
  7. Send an SNMP trap.
  8. Monitor the Wireshark trace to verify if the traffic displays in the trap viewer.
    If no traffic displays in the Wireshark trace, the issue is with the device and is not a SolarWinds issue. 

NOTE: By default, Trap is configured to listen on port 162. Ensure that the device is sending a trap to port 162. If it's on another port, you may configure the Trap Service to listen to different ports:

Change the SNMP trap port