OK, so I'm getting into SNMP retrieval of device attributes a lot more. SNMP is... interesting. No consistent way of retrieving stuff - seems each vendor has their own ideas.
So - I need the communities help. If you have an snmp browser (or even SNMP on the command line) and you have SNMP capable devices in your organisation, could I ask the following. Could you query the sysDescr.0 (or 1.3.6.1.2.1.1.1.0) and post it here along with what the device actually is (A Cisco Catalyst 3500 switch for example).
I have a testing Cisco 1721 router here which gives me the following: [code]STRING: Cisco IOS Software, C1700 Software (C1700-K9O3SY7-M), Version 12.4(25a), RELEASE SOFTWARE (fc2) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2009 by Cisco Systems, Inc. Compiled Fri 22-May-09 20:20 by prod_rel_team[/code]
I'd appreciate if you could try it on any and all devices (printers, switches, routers, UPSs, etc, etc) you have. The more I get, the better Open-AudIT snmp detection and classification will be. The idea is to build up a good SNMP -> Human readable list of what devices actually are (router, switch, printer, UPS, ect). Yes, I know some of this is available depending on vendor. For example, the "type" attribute available on some device at hrDeviceType.1 (or 1.3.6.1.2.1.25.3.2.1.2.1).
The following query strings are all of interest, really... If you want to query them all and paste the result here (along with a human readable "this is a switch|router|UPS|etc"), that would be awesome. If you come across any other attributes within SNMP you think might be of interest, please also post them.
[code]Type hrDeviceType.1 1.3.6.1.2.1.25.3.2.1.2.1 Description sysDescr.0 1.3.6.1.2.1.1.1.0 Description / Model hrDeviceDescr.1 1.3.6.1.2.1.25.3.2.1.3.1 Name sysName.0 1.3.6.1.2.1.1.5.0 Location sysLocation.0 1.3.6.1.2.1.1.6.0 Uptime system.sysUpTime.0 1.3.6.1.2.1.1.3.0 Printer Manufacturer prtInputVendorName.1.1 1.3.6.1.2.1.43.8.2.1.14.1.1 Printer Serial prtGeneralSerialNumber.1 1.3.6.1.2.1.43.5.1.1.17.1 Cisco IOS Version 1.3.6.1.2.1.47.1.1.1.1.9.1 Cisco Serial 1.3.6.1.2.1.47.1.1.1.1.11.1 Cisco Manufacturer 1.3.6.1.2.1.47.1.1.1.1.12.1 Cisco Model 1.3.6.1.2.1.47.1.1.1.1.13.1[/code]
EDIT - looks like I have the Cisco stuff solved. See [url=http://www.networkpipeline.com/index.php/products/common-cisco-snmp-oids]here[/url] for an easy enough to use list of OIDs -> Models of Cisco gear. If your device is not on the list, please query 1.3.6.1.2.1.1.2.0 and let us know the result and what model it is. Thanks again.
_________________ Support and Development hours available from [url=https://opmantek.com]Opmantek[/url]. Please consider a purchase to help make Open-AudIT better for everyone.
|