[unisog] SNMP question : The data type returned by querying a CISCOswitch for MacAddress.

Bill Kuntz fclwsk at cns.ufl.edu
Tue Oct 25 14:03:21 GMT 2005


Here is a specific article about it...

http://www.cisco.com/en/US/tech/tk648/tk362/technologies_tech_note09186a00801c9199.shtml

or

http://tinyurl.com/6ukqe

Bill

On Tue, 2005-10-25 at 12:00 +0000, unisog-request at lists.sans.org wrote:
> Date: Mon, 24 Oct 2005 15:04:09 -0700
> From: Karyn Williams <karyn at calarts.edu>
> Subject: Re: [unisog] SNMP question : The data type returned by
>         querying a CISCOswitch for MacAddress.
> To: UNIversity Security Operations Group <unisog at lists.sans.org>
> Message-ID: <3.0.1.32.20051024150409.01dc05f0 at muse.calarts.edu>
> Content-Type: text/plain; charset="us-ascii"
> 
> At 09:22 PM 10/22/05 +0800, you wrote: 
> >
> 
> >Can anyone tell me which data type is returned when querying a CISCO
> switch for the MacAddress of the system connected to it?
> 
> >The OID is .1.3.6.1.2.1.17.4.3.1.2. And use getnext query type. I use
> below command to get result in C#. 
> >Result = SnmpInterface.SnmpGetVb(vbl, 1, ref rgetOid, ref
> rgetValue); 
> 
> >Here rgetOid is a point to structure  
> >public struct smiOID 
> >                { 
> >                        public int len; // object identifier length
> in bytes 
> >                        public int ptr; // object identifier address 
> >                } 
> >
> >and rgetValue is a point to structure 
> >public struct smiVALUEOCTET 
> >                { 
> >                        // Also BITS, OPAQUE, IPADDR & NSAPADDR 
> >                        public int syntax;// syntax type 
> >                        public smiOCTET octetv;// value of type 
> >                }
> >
> >                // Also: BITS, IPADDR, OPAQUE & NSAPADDR 
> >                public struct smiOCTET 
> >                { 
> >                        public int len; // octet value length in
> bytes 
> >                       public int ptr; // octet value address 
> >                } 
> >
> >Please help me to get the MacAddress by this. Thanks for your
> attension. 
> 
> 
> Here is what Cisco says it is:
>         
> Object Information
> 
> Specific Object Information     
> Object  dot1dTpFdbPort
> OID     1.3.6.1.2.1.17.4.3.1.2
> Type    INTEGER
> Permission      read-only
> Status  mandatory
> 
> MIB     BRIDGE-MIB ;   -   View Supporting Images
> 
> Description     Either the value '0', or the port number of the
> port on which a frame having a source address
> equal to the value of the corresponding instance
> of dot1dTpFdbAddress has been seen. A value of
> '0' indicates that the port number has not been
> learned but that the bridge does have some
> forwarding/filtering information about this
> address (e.g. in the dot1dStaticTable).
> Implementors are encouraged to assign the port
> value to this object whenever it is learned even
> for addresses for which the corresponding value of
> dot1dTpFdbStatus is not learned(3).
> 
> -- 
> 
> Karyn Williams
> Network Services Manager
> California Institute of the Arts
> karyn at calarts.edu
> http://www.calarts.edu/network
> 
> 
> ------------------------------
-- 

Bill Kuntz
FCLA Open Systems Group
(352) 392-9020 x 242
fclwsk at cns.ufl.edu



More information about the unisog mailing list