Suppose that the administrator notices several local connection attempts to a restricted service (such as NNTP, the USENET News Transfer Protocol) from an unknown host. The administrator can use snmpstat to gather information about that host, provided the unknown host is running SNMP.
The following example shows the commands the administrator might use.
Verifying the origin of a network connection
# snmpstat paris public
Active Internet connections Proto Local Address Foreign Address (state) tcp paris.nntp bach.CS.ESU.EDU.1021 ESTABLISHED
# snmpstat -s bach.CS.ESU.EDU
System Group Description: SNMPD VERSION 220.127.116.11 SUN 3/260 - SUNOS3.5 ObjectID: SNMP_Research_UNIX_agent.18.104.22.168 UpTime: 4 days, 15 hours, 56 minutes, 39 seconds, 74 hundredths Contact: Operations 1-999-555-1040 Name: bach.CS.ESU.EDU Location: Comp Center Services: applications, end-to-end