Ad Widget

Collapse

Extremly long SNMP OIDs

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • ecce
    Junior Member
    • Jun 2023
    • 7

    #1

    Extremly long SNMP OIDs

    Hi,

    I find some OIDs I would like to monitor but when I walk the OID via CLI it return some ridiculously long child OIDs:

    Code:
    # snmpwalk 10.10.10.10 1.3.6.1.4.1.9.9.656.1.4.1.1.5
    CISCO-SMI::ciscoMgmt.656.1.4.1.1.5.174.48.49.50.48.48.51.48.61.48.48.48.48.56.48.53.49.61.52.51.52.58.51.51.60 = INTEGER: 6
    CISCO-SMI::ciscoMgmt.656.1.4.1.1.5.178.48.49.50.48.48.51.48.61.48.48.48.48.48.48.49.67.51.49.60.61.51.60.61.60 = INTEGER: 6
    CISCO-SMI::ciscoMgmt.656.1.4.1.1.5.180.48.49.50.48.48.51.48.61.48.48.48.48.49.57.51.48.48.66.60.50.69.59.51.50 = INTEGER: 6​
    The MIB used is CISCO-AUTH-FRAMEWORK-MIB:

    Code:
    cafSessionStatus OBJECT-TYPE
    SYNTAX INTEGER {
    idle(1),
    running(2),
    noMethod(3),
    authenticationSuccess(4),
    authenticationFailed(5),
    authorizationSuccess(6),
    authorizationFailed(7)
    }
    MAX-ACCESS read-only
    STATUS current
    DESCRIPTION
    "Indicates the current status of the authentication session.
    
    idle : the session has been initialized and no
    method has run yet.
    
    running : an authentication method is running for
    this session.
    
    noMethod : no authentication method has provided a
    result for this session.
    
    authenticationSuccess: an authentication method has resulted
    in authentication success for this session.
    
    authenticationFailed: an authentication method has resulted
    in authentication failed for this session.
    
    authorizationSuccess: authorization is successful for this
    session.
    
    authorizationFailed : authorization is failed for this
    session."
    ::= { cafSessionEntry 5 }


    174, 178 and 180 is a reference to the switchport used, but what is the rest of the OID? It's the first time I encounter this. I not sure how to create a discovery rule and item prototypes for this. The goal is to monitor the number of clients that successfully authorize, fail to authorize and so on, by monitoring the OID above and sum() up the number of each integer.

    Using Zabbix 6.4 on Linux

    Thanks
  • cyber
    Senior Member
    Zabbix Certified SpecialistZabbix Certified Professional
    • Dec 2006
    • 4806

    #2
    what is the rest of the OID?
    Not sure, but maybe some IP-s in hex format..

    72.73.80.72
    86.72.83.73
    72.72.73.103
    73.87.81.72
    Are these somehow familiar? ​

    Comment

    • ecce
      Junior Member
      • Jun 2023
      • 7

      #3
      Originally posted by cyber
      Not sure, but maybe some IP-s in hex format..

      72.73.80.72
      86.72.83.73
      72.72.73.103
      73.87.81.72
      Are these somehow familiar? ​
      No, that crossed my mind as well, I tried to identify the numbers but so far they don't match anything I can relate to the host connected. IP, hostname, MAC-address... nothing matches. It would also mean, in a way, that data is stored in the "key" part of the key-value pair, that feels a bit like breaking the rules. But I'm no guru on OIDs nor MIB files, maybe that is acceptable.

      Comment

      Working...