SNMP
What is Port 161?
Port 161 is used by the Simple Network Management Protocol (SNMP) for querying and managing network devices. Defined in multiple RFCs including RFC 3411-3418 for SNMPv3, this protocol allows network administrators to monitor routers, switches, servers, printers, and other networked devices from a central management station. SNMP uses a manager-agent architecture where management stations send queries (GET, SET) to agents running on managed devices via port 161. Agents respond with the requested information from their Management Information Base (MIB). SNMP is fundamental to network monitoring tools like Nagios, Zabbix, PRTG, and Cacti, and is implemented in virtually every network-capable device.
Common Uses
- Network device monitoring and health checks
- Bandwidth and traffic utilization tracking
- Hardware status monitoring (temperature, CPU, memory)
- Automated network inventory and discovery
- Configuration management of network equipment
Technical Details
Copy-paste commands to check port 161 (SNMP) from your terminal
Test connectivity
nmap -p 161 -sU -sV example.com
(echo > /dev/tcp/example.com/161) 2>/dev/null && echo "open" || echo "closed"
Open port in firewall
sudo ufw allow 161/udp
sudo iptables -A INPUT -p udp --dport 161 -j ACCEPT
sudo firewall-cmd --permanent --add-port=161/udp && sudo firewall-cmd --reload
Security Considerations
SNMPv1 and v2c use community strings (essentially passwords) transmitted in plaintext. Default community strings like 'public' and 'private' are widely known and frequently exploited. Always use SNMPv3 with authentication and encryption. Change default community strings. Restrict SNMP access to management stations only via ACLs. Never expose SNMP to the internet.
Popular Ports Reference
The most commonly used and referenced network ports