MIB Browser Version 16 User Guide

iReasoning MIB Browser is a desktop tool for managing SNMP-enabled devices and applications. It loads standard and proprietary MIB modules, tolerates some malformed MIB files, runs SNMP queries and updates, visualizes device data, and processes incoming notifications through a built-in Trap Receiver and rule engine. It is powered by the iReasoning SNMP API.

Enterprise web client

Enterprise Edition includes a browser-based console served directly by the MIB Browser server. By default it is available on the server itself at http://127.0.0.1:11900. The existing Java client continues to use TCP port 11899. The current Java client adds an authenticated handshake on that port when server password protection is enabled.

First access

1. Start the Enterprise server and open the web address in a current desktop browser on the server machine.
2. A fresh installation has no password and opens the console without a sign-in screen, but initially accepts web and Java clients from the local machine only. Both clients display Local access only while this protection is active.
3. To require authentication, open Settings > Security > Change Password. The administrator account is always admin, and passwords must contain at least eight characters. When the first password is set, the safe default is to keep access local; the dialog also offers to permit other computers allowed by the address list.
4. To permit other computers without changing the password, open Settings > Security > Local Machine Only and confirm the change. If no password exists, those computers will connect without authentication, so this mode is not recommended.
5. To return to passwordless access, enter the current password and choose Disable Password. When remote access is active, the recommended option disables the password and restores local-only access atomically.

For unattended secured setup, set MIB_BROWSER_WEB_ADMIN_PASSWORD before the first server start. The server stores a salted PBKDF2 password hash rather than the password. Existing password hashes are preserved during upgrades. Agent communities and SNMPv3 passwords are write-only in the web interface.

Enterprise Java client security

The Enterprise Java client uses the same fixed admin account and security settings as the web client. A fresh passwordless server opens locally without a prompt and shows a persistent Local access only indicator in its toolbar. Select that indicator, or use Options > Security, to set, change, or disable the password, change the local-only policy, and edit the shared address list. When a password is configured, the Java client asks for it before showing the main workspace and does not store it. Changing the password signs out all browser sessions and Java clients. Disabling the password keeps current clients connected and makes future permitted connections passwordless. Java clients from releases without the authenticated handshake must be upgraded before connecting to a password-protected server.

Network and TLS configuration

Edit config/web.properties to change the bind address or port. A non-loopback address is refused unless built-in TLS is configured with a JKS or PKCS12 key store. A deliberate plaintext remote deployment requires web.allowInsecureRemote=true. A loopback listener may also be placed behind a trusted same-origin reverse proxy. Turning off Local machine only changes the shared access policy but does not change the web bind address or TLS settings; remote web access still requires a suitable listener configuration.

The explicit web.localOnly policy controls both endpoints. While it is true, only IPv4 and IPv6 loopback peers are accepted and the address list is preserved but inactive. When it is false, Settings > Security > Allowed IP Addresses and the Java client's Options > Security accept one literal IPv4 or IPv6 address, or one inclusive range such as 192.168.1.2 to 192.168.1.254, per line. An empty list then allows every address, while loopback is always allowed for recovery. The policy uses the direct network peer and never trusts forwarded-address headers. When a reverse proxy is used, configure end-user IP restrictions on that proxy.

The console provides MIB browsing, asynchronous SNMP queries, live and historical traps, receiver rules, watches, expressions, agent profiles, and license management. Trap and watch updates reconnect automatically; when retained event history is unavailable the console refreshes its affected views.

Gmail and Microsoft Outlook OAuth connections can be configured in Settings > Trap Receiver > SMTP when the web console is opened locally using localhost or a loopback address. The provider callback also returns to the Enterprise server's loopback interface, so OAuth setup is intentionally unavailable from remote or reverse-proxied browser sessions in this release.

Major features

• An intuitive desktop interface
• Complete SNMPv1, SNMPv2c, and SNMPv3 support, including USM and VACM
• SNMPv3 security algorithms including HMAC-MD5, HMAC-SHA1, HMAC-SHA2, CBC-DES, 3-DES, CFB128-AES-128, CFB128-AES-192, and CFB128-AES-256
• A robust SMIv1 and SMIv2 MIB parser
• IPv6 support
• A Trap Receiver with rules, delayed or cancellable actions, and password or OAuth email forwarding
• An SNMP trap sender
• Application and SNMP packet logging
• Table view for MIB tables
• SNMPv3 USM user management
• Port view for network interface cards
• Switch port mapper for mapping switch ports
• Performance graphs for numeric OID values
• Device snapshot
• Cisco device snapshot
• Ping and traceroute tools
• Network discovery tool
• SNMP agent comparison
• Bookmarks
• Support for Windows, macOS, Linux, and other UNIX platforms

Requirements

• Windows, macOS, Linux, or another supported UNIX platform.

Download and run MIB Browser

1. Download the appropriate MIB Browser installer or archive. On Windows, run setup.exe. On macOS, Linux, or another UNIX platform, use the package provided for that platform or extract the archive to the directory of your choice.
2. Start the application:
   • Windows: Open MIB Browser from its application shortcut.
   • Linux or UNIX: Open the MIB Browser installation directory and run browser.sh.
   • macOS 10.8 or later: Download mibbrowser.pkg, then install it in /Applications from Terminal:

     sudo installer -store -pkg mibbrowser.pkg -target /

     On earlier macOS versions, extract mibbrowser.zip, open the ireasoning/mibbrowser directory, and run browser.sh.

Enterprise Edition

Enterprise Edition can run the Trap Receiver and Watches as a system service. A Watch can send email or SNMP traps when a MIB object crosses a configured threshold.

On Windows, the service starts automatically. On Linux and macOS, configure the operating system to run $INSTALL_DIR/lib/runserver.sh at startup.

The MIB Browser interface

Menus

• File menu
  

  Load MIB

  Open a file chooser and select one or more MIB files. Use your platform's standard multi-select key to select several files at once.

  MIB Modules

  List properties of all loaded MIB modules.

  Server Address (Enterprise Edition Only)

  By default, MIB Browser connects to a local server for Trap Receiver and Watch data. Change this address to connect to a remote MIB Browser server.

  Open Session

  Open a previously saved session file.

  Open Graph Data

  Open a previously saved graph data file.

  Save Session

  Save the current open tabs and their settings to a session file so that you can restore them later.

  Exit

  Exit MIB Browser.

• Edit menu
  

  Find in MIB Tree

  Find a node in the MIB tree.

  Find in Result Table

  Find a string in the result table.

• Polls menu
  

  Create polls that retrieve multiple values from SNMP agents and refresh them at a configured interval.

  Create Poll
  

  

  After you create a poll, it appears in the Polls menu. Select it to display its results in a tab in the result pane.

  Poll Results
  

  

• Operations menu
  

  Get

  Send an SNMP GET request to the current agent.

  Get Next

  Send an SNMP GET-NEXT request to the current agent.

  Get Bulk

  Send an SNMPv2c or SNMPv3 GET-BULK request to the current agent. This operation is not supported by SNMPv1 agents and will time out when used with one.

  Set

  Send an SNMP SET request to the current agent.

  The SET dialog opens:

  

  Enter a new value in the Value field, then click OK.

  To update several variables, select multiple rows in the result pane before choosing the SET operation.

  Note:

  1. For the BITS data type, use set notation, such as {1, 3, 8}.

  2. A hexadecimal string can be entered as 0x12 0xA1 0x30 or 0x12A130.

  Get Subtree

  Use SNMP GET-NEXT requests to retrieve the complete subtree from the current agent.

  Walk

  Perform an SNMP walk on the current agent.

  Table View

  Show MIB table data.

  

  This command opens a Table View window. The OID field must contain a table or entry OID, such as ifTable or ifEntry.

  To display only selected columns, select multiple variables from the same table before choosing Table View.

  The Table View toolbar provides these actions:

  Rotate button	Rotate the table by 90 degrees.
  Refresh button	Refresh the table immediately.
  Export	Export table data to a CSV file.
  Poll button	Refresh table periodically.
  SNMP SET	Perform an SNMP SET operation on the selected table cells.
  Create Row	Create a row in a table that supports dynamic rows through a RowStatus or EntryStatus column.
  Delete Row	Delete the selected row from a table that supports dynamic rows through a RowStatus or EntryStatus column.

  Graph

  Plot the selected OID. If a graph tab is already open, choose whether to reuse it or open another tab.

  

  The OID field must contain a numeric scalar, a numeric table column, or a numeric instance, such as sysUpTime, ifOutOctets, or ifOutOctets.1.

  Buttons on the toolbar:

  Export to CSV file	Export chart data to a CSV file.
  Import from CSV file	Import data from a CSV file.
  Save as PNG	Save the chart as a PNG image.
  Print	Print the chart.
  Restart	Restart chart plotting.
  Pause	Pause chart plotting.
  Switch	Switch between the current and global views.
  Display trace	Display trace lines.
  Grid	Display grid lines.
  Rate	Display rate-of-change values instead of raw values.

  Click Set to change the polling interval.

• Tools menu
  

  Trap Sender

  Open the Trap Sender window:

  

  Use this window to send SNMPv1 or SNMPv2c traps and inform requests. Save frequently used settings as a bookmark so that you do not need to enter them again.

  For an SNMPv1 or SNMPv2 trap node in the MIB tree, right-click the node and choose Send Trap. MIB Browser opens this window and fills in values from the selected node.

  Watches

  Display the variables currently being monitored.

  

  Professional Edition

  

  Enterprise Edition

  

  Enterprise Edition: Watch history

  
  

  Add Watch

  Add a Watch item.

  

  Professional Edition

  

  Enterprise Edition

  In Enterprise Edition, each Watch can send email or an SNMP trap when it enters an alarm or rearm state.

  Run Script

  Run commands from a script file.

  • Script file format

    1. Place each command on its own line.
    2. Begin a comment line with #.
    3. Use GET, GET_NEXT, or SET for SNMP operations.

       GET host[:port] OID-or-name [OID-or-name]...
       GET_NEXT host[:port] OID-or-name [OID-or-name]...
       SET host[:port] OID-or-name data-type value [OID-or-name data-type value]...

       Supported data-type codes are:
       • i: integer; u: unsigned integer; t: TimeTicks
       • a: IP address; o: OID; s: string
       • c: counter; g: gauge; x: hexadecimal data
       MIB Browser uses the SNMP version, community names, and SNMPv3 settings saved in the agent's Advanced properties.

       get snmp.ireasoning.com sysUpTime
       get snmp.ireasoning.com sysUpTime sysLocation
       getnext snmp.ireasoning.com:1611 .1.3.6.1.2.1.1.3.0
       set snmp.ireasoning.com sysContact s joe@somewhere.com
       set snmp.ireasoning.com sysContact s joe@somewhere.com sysName s Linux

    4. Use sound or email as an action. The $ symbol represents the result of the previous query. Supported operators are >, <, =, !=, and err. The err operator matches a nonzero error status. Configure SMTP before using the email action.

       get snmp.ireasoning.com .1.3.6.1.2.1.11500.12.11.0
       if $ != 0 sound
       if $ err sound
       if $ > 0 email joe@somewhere.com

    5. Pause execution with sleep N, where N is the number of seconds.

       sleep 5

    6. Save query results with save filename. If the destination exists, MIB Browser appends a numeric suffix, such as result.txt.1 and then result.txt.2.

       save ~/Downloads/result.txt

  • Sample script file

    save ~/Downloads/result.txt
    get snmp.ireasoning.com sysUpTime
    if $ < 1000000 email joe@somewhere.com
    sleep 5
    set snmp.ireasoning.com sysContact s joe@somewhere.com
    if $ err sound

  Port View

  Display inbound and outbound bandwidth utilization and error percentages for every port on a device. Hover over a chart to see port properties, or clear the checkbox beside a port to exclude it.

  Chart colors indicate severity and can be customized in the settings.

  

  
  

  Switch Port Mapper

  Map devices connected to a managed switch and display bandwidth utilization for its ports.

  

  Configure Settings

  • Routers : IP addresses and community names for Layer 3 routers used to retrieve MAC-to-IP mappings.
  • Chart Polling Interval : The interval used to poll data for charts.

  Device Snapshot

  Display a snapshot of available device data, including system information, interfaces, disks, processes, and installed software.

  

  Cisco Device Snapshot

  Display a snapshot of a Cisco device.

  

  Add more OIDs from the settings window. Their values appear in the Basic Information panel.

  Utilization can be displayed as either a meter or a pie chart.

  Log Window

  Open the application log. To clear it, right-click the pane and choose Clear text.

  Ping

  Open the Ping tool:

  

  Enter an IP address and click Ping. Results appear in the text area.

  Trace Route

  Open the Traceroute tool:

  

  Enter an IP address and click Trace Route. Results appear in the text area.

  Network Discovery

  Open the network discovery tool:

  

  Enter a subnet address, such as 192.168.1.0, and click Start. The tool discovers hosts on the subnet and queries the system table on hosts that run an SNMP agent.

  Manage SNMPv3 USM & VACM

  

  The users table is loaded from usmUserTable. The existing USM actions let you clone a user, activate or deactivate it, change its authentication and privacy passwords, or delete it. Click Refresh to reload both the USM users and their VACM information from the selected agent.

  When the agent supports SNMP-VIEW-BASED-ACM-MIB, MIB Browser also queries vacmSecurityToGroupTable, vacmAccessTable, and vacmViewTreeFamilyTable. Select a user to display the user's security name and VACM group below the users table. The details area lists every access entry for that group, including its context, security model and level, and its read, write, and notify views.

  The view details show the subtrees referenced by those views, whether each subtree is included or excluded, and its mask, storage type, and status. VACM information is read-only. If the agent does not support VACM, has no group mapping for the selected user, or has no access or subtree definitions, the details area shows an explanatory message while all USM user-management actions remain available.

  Compare Devices

  Compare the SNMP values of two devices:

  

  Values that differ between the devices are shown in blue:

  

  Options

  Open the Options window to customize MIB Browser:

  

  General tab

  SNMP Retries	Number of retries for SNMP queries.
  SNMP Timeout	Timeout value for SNMP queries, in seconds.
  Lenient Parsing	Allow the MIB parser to continue past selected syntax errors in MIB files.
  Logging Level	Set the application logging level. DEBUG records SNMP PDUs in the Log window and may reduce performance.
  Trap Port	The UDP port on which the Trap Receiver listens.
  Max Token Number	Limit the number of OID tokens shown in a Trap Receiver description. For example, when this value is 6, the message ".iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifEntry.ifAdminStatus.3" will be truncated to "mgmt.mib-2.interfaces.ifTable.ifEntry.ifAdminStatus.3".
  Single Tree Root	Display all loaded modules under a single .iso root. When disabled, each MIB module has its own root. Restart MIB Browser after changing this option.
  Agent's Character Encoding	Select the character encoding used to display values from agents that do not use the default Western encoding.
  Max Graph Data Count	The maximum number of graph data points kept in memory.
  Non Repeaters	The non-repeaters value used in SNMP GET-BULK requests.
  Max Repetitions	The max-repetitions value used in SNMP GET-BULK requests.
  Minimize to system tray	Minimize MIB Browser to the system tray instead of exiting when its window is closed.

  Single tree root

  Each module has its own root node

  Default Values tab

  Set the default properties used for new SNMP agents.

  Agent tab

  

  This table stores properties for previously visited SNMP agents. You can add or remove agents.

  For SNMPv1 and SNMPv2c agents, the user, authentication, and privacy fields are ignored. For SNMPv3 agents, the read and write community fields are ignored.

  MIB Files tab

  

  This table stores loaded MIB file names. You can add or remove files.

• Bookmarks menu
  

  This menu contains saved bookmarks. A bookmark links an OID to an operation, allowing you to repeat a frequently used task by selecting its name instead of entering it again.

• Expressions menu
  

  This menu contains predefined and custom expressions. An expression combines values from one or more MIB object instances to calculate a metric, such as network throughput.

  Each expression contains one or more named variables with associated OIDs. When a variable's OID ends with a period, MIB Browser queries every instance of that OID, similarly to a Get Subtree operation.

  Variables that represent counters may use delta values instead of raw values. MIB Browser then runs two queries, 10 seconds apart by default, and uses the difference between the results.
  

Toolbar

• Address field

  Enter the SNMP agent's IP address and optional port in the form ipAddress@port or ipAddress:port for IPv4. Omit the port when using the default port, 161.

• Address Group

  contains multiple IP addresses and optional port numbers. Enter g followed by a space in the address field to use a group. For example:

  192.168.1.1, 192.168.1.2:1611, 192.168.2.1

  The group dialog does not configure community names or SNMPv3 parameters. To edit those properties, enter an individual address in the Address field and click Advanced. Address Groups automatically use the saved properties for that agent.

• Advanced button

  Configure the current SNMP agent, including community names and SNMPv3 USM parameters.

  For an SNMPv3 agent, MIB Browser updates its engine ID, authentication key, and privacy key after the first successful query.

• OID field

  

  Enter the object identifier for an SNMP query. Selecting a MIB tree node or result-table row updates this field automatically, and you can also enter an OID directly.

• Operations

  Select an SNMP operation. The operation runs immediately when selected.

• Go button

  Run the selected operation.

MIB tree pane

The MIB tree area contains the tree pane at the top and the properties pane at the bottom.

• Tree Pane

  The tree pane displays loaded MIB modules. Right-click a module root to use Find, Expand, or Unload MIB. Other nodes provide Find and Expand.

  	Table node
  	Table entry node
  	Read-write node
  	Read-create node
  	Index node
  	Leaf node, usually read-only

  Table: Icon descriptions

  Double-click a scalar node to query its value from the agent shown in the toolbar. Double-click a table node, such as ifSpeed, to query its subtree.

• Node Properties Pane

  Display properties for the selected node. Hover over values in the second column for more information.

Result pane

Query results appear in a table. If an octet string is shown in hexadecimal format, double-click it to switch display modes.

Buttons on the right toolbar:

Trap Receiver

Main window

Open the Trap Receiver from MIB Browser, or start it as a standalone window.

The upper pane lists received traps. Select a trap to view its details in the lower pane.

Trap Receiver controls
Trap Filter button	Filter received traps by source IP address or trap OID. In the web client, open Settings > Trap Receiver > Trap Filter. Multiple Java regular expressions can be separated by commas; each expression must match the complete value.
Start Trap Receiver button	Start listening for traps. The button is disabled while the Trap Receiver is running. Opening the window does not start the receiver automatically.
Stop button	Stop listening for traps.
Add Trap Rule	Add a rule for processing traps. When a trap is selected, MIB Browser pre-fills applicable fields with data from that trap. MIB Browser evaluates all applicable rules unless one marks the trap as ignored. Rules run in name order, so renaming a rule changes its position. For example, if rules A and B match the same trap and set different severities, B runs after A and determines the final severity.
In the web client, open Settings > Trap Receiver > Rules. The rule manager supports adding, editing, and deleting the same shared server rules. Its editor provides Conditions, Actions, and Suppression sections, plus a loaded-MIB search for choosing trap OIDs. Existing Java-client SNMP-request and outgoing-trap actions are preserved when a rule is edited on the web. Command actions are shown by status and can be changed only when web.allowCommandActions=true is configured on the server. Rule conditions Trap OID For an SNMPv2 trap, use its snmpTrapOID. For an SNMPv1 trap, use enterpriseOID + '.0.' + specific. Wildcards * and ? are supported. * matches any sequence of digits and periods; ? matches zero or one digit. For example, .1.3.6.4.155.12.* matches OIDs below .1.3.6.4.155.12. The pattern .1.3.6.4.155.12.? matches suffixes from 0 through 9, but not 11. Allowed trap source IPs Enter source IP patterns separated by commas. Wildcards * and ? are supported. For example, 1.2.3.* matches addresses from 1.2.3.0 through 1.2.3.255, while 1.2.3.? matches 1.2.3.0 through 1.2.3.9. Variable-binding values contain Enter one or more keywords separated by commas or vertical bars. The condition matches when any keyword occurs in a raw variable-binding value. Raw values use the format received from the agent and are not translated for display. Rule actions Play sound Play a sound when the rule conditions match. Run command Run a system command when the rule conditions match. Use an absolute path if the executable is not available on PATH. You can include tokens in the command. Send email Send email when the rule conditions match. SMTP must first be configured in the SMTP tab of Trap Receiver Settings. Issue SNMP request Send an SNMP GET or SET request to an agent when the rule conditions match. Send SNMP trap Send an SNMPv1, SNMPv2c, or SNMPv3 trap when the rule conditions match. Suppression tab Suppression provides a cancellation window before a rule performs external actions. It is useful when a second, related trap reports that a problem has cleared, or when an operator acknowledges or clears the original trap before notifications and automated actions should run. To configure suppression for a rule: Open Add Rule or Edit Rule, configure the rule's Conditions and Actions, and then select the Suppression tab. Select Enable action suppression and enter a positive number in Delay actions for ... minutes. Optionally enter one or more related-trap conditions under Match any of the following. These conditions use OR logic: a match in any field cancels the pending actions. If every field is empty, acknowledging or clearing the original trap can still cancel them. To test whether a device or host is reachable when the delay expires, select PING, enter an IP address or host name, and choose Fails or Succeeds. The target defaults to $ip, which represents the triggering trap's source address. PING is disabled by default. Click Save Rule. A matching trap now creates pending actions instead of running them immediately. Suppression cancellation conditions Original trap is acknowledged or cleared Acknowledge or clear the original trap in the Trap Receiver during the delay window. Its pending rule actions and delayed system-wide email are cancelled. Trap OID Enter the OID of a related or clearing trap, or use Browse.... The same * and ? wildcard rules described for rule conditions are supported. Trap source IPs Enter one or more source IP patterns separated by commas. Wildcards are supported. Variable-binding values contain Enter one or more text values separated by commas or vertical bars. A related trap matches when a raw variable-binding value contains any entered value. PING Select this option to ping the configured IP address or host name once after the delay. Choose Succeeds to cancel the delayed action when the host responds, or Fails to cancel it when the ping fails or times out. Use $ip for the source address of the trap that triggered the rule. The single probe can extend the configured delay by up to five seconds. If the ping command cannot be started or the token cannot be resolved, the result is indeterminate and the delayed action proceeds. During the delay window, sound, rule-generated email, command execution, SNMP requests, and outgoing trap actions are held. If the window expires without cancellation, the actions run once. The rule's severity and description changes are applied immediately because they describe the received trap rather than perform an external action. System-wide email forwarding: When Enable forwarding traps via email is selected in SMTP settings, a trap that matches a suppression-enabled rule also delays the system-wide email. This works even when the rule has no action selected on its Actions tab. If the original trap is acknowledged or cleared, or a related trap matches during the window, the system-wide email is not sent. A related trap that cancels pending work is treated as a clearing event and does not trigger external actions of its own during that evaluation. If several suppression-enabled rules match the same trap, each rule's own actions use its configured delay. The single system-wide email waits for the longest applicable delay and is cancelled when any applicable rule's cancellation condition is met. Traps that do not match a suppression-enabled rule continue to use immediate system-wide email forwarding.
Manage Rules	Edit or delete existing rules.
Clear Table button	Remove all rows from the trap table.
Export Table to CSV	Export table data to a CSV file.
Options	Open the Trap Receiver settings.

Options

• General tab

  

  Trap Port	The UDP port on which the Trap Receiver listens.
  Forward Trap To	Forward received traps to another receiver as SNMPv1 PDUs.
  Save trap data to database	Store received traps in the bundled database so that they can be loaded again later.
  Show trap message window	Display a notification near the system tray when a trap arrives.
  Play sound	Play sound when a trap is received.
  Execute command	Execute a command when a trap is received.

  Tokens used in execute command
  $ip	IP address of the trap source
  $severity	Severity as configured in the trap rule
  $description	Description as configured in the trap rule
  $oid	Trap OID
  $ts	Timestamp value
  $sp	Value of the SNMPv1 trap-specific field
  $vb.all	All variable bindings
  $vb.n	The nth variable binding. For example, $vb.1 is the first binding and $vb.2 is the second.

  
  

• SMTP tab

  Use this tab to send received traps to one or more email addresses. The primary SMTP server is required when forwarding is enabled. A configured secondary server is used automatically if delivery through the primary server fails. The primary and secondary servers can use different authentication methods and different OAuth accounts.

  To enable system-wide trap email forwarding, select Enable forwarding traps via email and enter one or more addresses in To Email Accounts. Separate multiple addresses with commas or semicolons. Then configure the primary server using one of the following modes.

  SMTP authentication modes
  Username and password	Leave Use OAuth unselected. Enter the SMTP host, sender address, username, password, and the transport security required by the mail server. Use either Enable SSL/TLS or Enable STARTTLS, not both. If the server permits unauthenticated SMTP, leave both User Name and Password empty.
  OAuth 2.0	Select Use OAuth. The legacy host, From, username, password, and security controls are hidden and the provider, email, authorization status, and OAuth actions are shown instead. Saved legacy values are preserved if you later turn OAuth off.

  Configure OAuth 2.0

  1. In the Primary SMTP Server section, select Use OAuth.
  2. Select GMail or Outlook, and enter the mailbox address in Email. This address is used as both the SMTP account name and the sender's From address. The SMTP host and transport security are configured automatically; no client ID or client secret is requested.
  3. In the Java client, click Authorize in Browser. In the web client, click Connect. Sign in to the selected account and grant the requested mail access. Complete the browser flow within five minutes. After the browser reports that authorization is complete, return to MIB Browser. MIB Browser displays an OAuth Authorized message and the status changes to Connected.
  4. The web client saves the connection automatically. In the Java client, click Apply or OK to save the authorization so it continues working after MIB Browser is restarted.
  5. Optionally repeat these steps in Secondary SMTP Server. Its provider and account are independent of the primary server.

  Provider	Automatic SMTP settings	Authorization notes
  GMail	smtp.gmail.com using SSL/TLS	Sign in with the Google Workspace or Gmail account entered in the Email field and approve Gmail mail access.
  Outlook	smtp-mail.outlook.com:587 using required STARTTLS	Sign in with the Microsoft 365, Outlook.com, or Hotmail account entered in the Email field. An organization administrator may need to approve access and enable SMTP AUTH for the mailbox.

  Browser callback and local port: During authorization, MIB Browser temporarily listens only on the loopback interface and asks the operating system for an available high-numbered port. It does not bind to port 80 and is not reachable from other computers. Google returns to a temporary 127.0.0.1 callback; Microsoft returns to a temporary http://localhost:<port> desktop callback. The listener stops after authorization or after the five-minute timeout. If the system browser cannot be opened, MIB Browser displays a copyable authorization URL that can be opened manually on the same computer.

  MIB Browser stores the renewable authorization securely and keeps short-lived access tokens only in memory. Access tokens are refreshed automatically before they expire. The saved authorization remains available after an application restart, allowing MIB Browser to obtain a new access token when mail is next sent. Use Disconnect to clear the saved OAuth authorization. Changing the provider or Email field also requires authorization again; click Apply or OK afterward to save the change.

  Send a test message

  1. Click Send test mail, enter the destination in Send email to, and click OK.
  2. The modal Sending Test Mail dialog displays a spinner while delivery is in progress, then reports a result for the primary server and for the secondary server when one is configured.
  3. Click Close to dismiss the dialog. Closing it while the spinner is active does not cancel the SMTP operation.

  Test mail verifies each configured server separately. Normal trap forwarding first uses the primary server and falls back to the secondary server if the primary attempt fails. OAuth or password values are not shown in SMTP logs.

  Troubleshooting OAuth: If authorization is denied, times out, or reports a provider error, verify the entered email address, retry Authorize in Browser, and check that a proxy or firewall is not blocking Google or Microsoft sign-in and token endpoints. For Outlook, also verify that SMTP AUTH is enabled for the mailbox. A local port conflict does not normally require configuration because a free port is selected for every authorization attempt.

  When rule suppression is enabled, system-wide trap email can be delayed and cancelled together with rule actions. See the Suppression Tab section.

  
  

• Email Template tab Enterprise Edition only

  

  When enabled, this template is used for every email sent by the Trap Receiver. In the web client, open Settings > Trap Receiver > Email Template; it uses the same saved template as the Java client. Template content is sent as plain text, and a custom subject is required unless Use default email subject is selected.

  Tokens used in template
  $ip	IP address of the trap source
  $oid	Trap OID
  $ts	Timestamp value
  $sp	Value of the SNMPv1 trap-specific field
  $trap	The complete trap message in HTML format, as displayed in the lower Trap Receiver pane.
  $vb.all	All variable bindings
  $vb.n	The nth variable binding. For example, $vb.1 is the first binding and $vb.2 is the second.

  
  

• SNMPv3 Trap Receiver tab

  

  This table stores properties for SNMPv3 trap senders. You can add or remove senders.

  In the web client, open Settings > Trap Receiver > SNMPv3 Trap Receiver. Add a USM username, security level, and the required authentication and privacy credentials. Passwords are write-only, encrypted in the shared trap receiver configuration, and are never returned to the browser. When the receiver is running, adding or deleting a user automatically restarts it so the new trusted-user list takes effect immediately.

Command-line tools

Command-line tools are located in $INSTALL_DIR\bin.

• Launch MIB Browser from a terminal with these options:

  browser.bat -h (or -help, -?)	Display command usage.
  -h <h>	Set the SNMP agent's host name or IP address.
  -p <p>	Set the SNMP agent port. The default is 161.
  -v <1|2|3>	Set the SNMP version to 1, 2, or 3.
  -c <c>	Set the SNMP community name. The default is public.
  -o <o>	Set the OID.
  -a <a>	Set the operation to get, getnext, getsubtree, walk, or gettable.
  -f <filename>	Set the output CSV file name for the gettable operation.
  -s <filename>	Open a saved session on startup.
  -w	Open the Watches tab at startup.

• Command-line graph tool

  Use graph.bat to record SNMP agent values in a file. Open the resulting file in MIB Browser by choosing File > Open Graph Data.

  Run graph.bat without arguments to display usage information and examples.

• Command-line SNMP tools

  snmpget.bat sends an SNMP GET request.

  snmpgetnext.bat sends an SNMP GET-NEXT request.

  snmpset.bat sends an SNMP SET request.

  trap.bat sends an SNMP trap.

Keyboard shortcuts

Choose an edition

Personal Edition is free for private use on one workstation. You may redistribute the complete package for private use, but you may not use this edition for commercial or professional work.

Professional Edition adds management and monitoring features and is licensed for commercial or professional use.

Enterprise Edition adds service-based operation, advanced Trap Receiver capabilities, and enhanced monitoring.

Feature comparison