Page 1 of 1

SNMPWALK showing very strange output

Posted: 22 Sep 2011 16:52
by hghelani
You will observe from below I have outlined 7 cases.

The tests were performed against a Live 6850 switch.

For each case I have documented my findings followed by a line of data taken when the show Mac-address-table CLI command IS EXECUTED

Followed by the output returned when an SNMPWALK is performed against the same switch and port number.

And as you can see I am getting some very strange data and am hoping some one can tell me why and how to fix it?


Case 1 The Mac address of the PC

64:31:50:34:6e:5f

Is clearly NOT the same Mac address returned by the SNMPWALK, which is

d1P4n_

VLAN 1 64:31:50:34:6e:5f learned --- bridging 1/5

C:\>snmpwalk -v 2c -c PW SWITH-IP
SNMPv2-SMI::enterprises.6486.800.1.2.1.8.1.1.1.1.1.1005.1.100.49.80.52.110.95 = STRING: "d1P4n_"





Case 2 The Mac address of the PC

64:31:50:33:53:9f

Is clearly NOT the same Mac address returned by the SNMPWALK, which is

d1P3Sƒ

VLAN 228 64:31:50:33:53:9f learned --- bridging 1/7

C:\>snmpwalk -v 2c -c PW SWITH-IP
SNMPv2-SMI::enterprises.6486.800.1.2.1.8.1.1.1.1.1.1007.228.100.49.80.51.83.159 = STRING: "d1P3Sƒ"




Case 3 The Mac address of the PC

3c:4a:92:c3:d2:44

Is clearly NOT the same Mac address returned by the SNMPWALK, which is

<JÆ+ÊD

VLAN 195 3c:4a:92:c3:d2:44 learned --- bridging 1/8

C:\>snmpwalk -v 2c -c PW SWITH-IP
SNMPv2-SMI::enterprises.6486.800.1.2.1.8.1.1.1.1.1.1008.195.60.74.146.195.210.68 = STRING: "<JÆ+ÊD"




Case 4 NO ANNOMOLIES FOUND, AS BOTH SETS OF DATA SHOW THE SAME MAC ADDRESS


VLAN 216 00:18:fe:26:8e:70 learned --- bridging 1/11

C:\>snmpwalk -v 2c -c PW SWITH-IP
SNMPv2-SMI::enterprises.6486.800.1.2.1.8.1.1.1.1.1.1011.216.0.24.254.38.142.112 = Hex-STRING: 00 18 FE 26 8E 70





Case 5 NO ANNOMOLIES FOUND, AS BOTH SETS OF DATA SHOW THE SAME MAC ADDRESS


VLAN 228 00:1c:c4:ae:b8:51 learned --- bridging 1/12

C:\>snmpwalk -v 2c -c PW SWITH-IP
SNMPv2-SMI::enterprises.6486.800.1.2.1.8.1.1.1.1.1.1012.228.0.28.196.174.184.81 = Hex-STRING: 00 1C C4 AE B8 51




Case 6 NO ANNOMOLIES FOUND, AS BOTH SETS OF DATA SHOW THE SAME MAC ADDRESS


VLAN 228 00:17:a4:1c:7f:a1 learned --- bridging 1/13

C:\>snmpwalk -v 2c -c PW SWITH-IP
SNMPv2-SMI::enterprises.6486.800.1.2.1.8.1.1.1.1.1.1013.228.0.23.164.28.127.161 = Hex-STRING: 00 17 A4 1C 7F A1




Case 7 NO ANNOMOLIES FOUND, AS BOTH SETS OF DATA SHOW THE SAME MAC ADDRESS


VLAN 216 00:19:99:7e:c6:b0 learned --- bridging 1/14

C:\>snmpwalk -v 2c -c PW SWITH-IP
SNMPv2-SMI::enterprises.6486.800.1.2.1.8.1.1.1.1.1.1014.216.0.25.153.126.198.176 = Hex-STRING: 00 19 99 7E C6 B0


CAN SOME ONE PLEASE HELP ME

Re: SNMPWALK showing very strange output

Posted: 24 Sep 2011 04:36
by one6f
Hi,
it should be Hex-STRING and not STRING !
Please try also with snmpwalk this oid: .1.3.6.1.2.1.17.4.3.1.1
Try to use another manager(not Windows).
Try capture with wireshark and look in snmp response packets.
What sw you running (with 6.4.3.779 and 6.3.4.601 we have no such issue).