Starent SNMP traps not decoded

asked 2018-02-28 21:10:31 +0000

dandreye
23 ●6 ●10 ●12

updated 2018-02-28 21:58:16 +0000

Jaap

13730 ●684 ●115

Hi All,

I tried adding text file STARENT-MIB into Wireshark by means of placing it alongside all other MIBs in snmp/mibs folder under Wireshark root and then adding SMI module STARENT-MIB (it only survives Wireshark restart when the Suppress SMI Errors checkbox is checked). Even though the definitions of my OIDs 1.3.6.1.4.1.8164.2.1253 and 1.3.6.1.4.1.8164.2.1254 seem to be there Wireshark doesn't decode them for some reason:

starCardSwitchoverStart NOTIFICATION-TYPE
    OBJECTS { starSlotNum, starSlotNum }  
    STATUS  current
    DESCRIPTION
    "<omitted>"
    --#SUMMARY "Card Switchover start from card %d to card %d"
    --#ARGUMENTS {0,1}
    --#STATE DEGRADED
    --#SEVERITY MAJOR
    ::= { starentTraps 1253 }
starCardSwitchoverComplete NOTIFICATION-TYPE
    OBJECTS { starSlotNum, starSlotNum }
    STATUS  current
    DESCRIPTION
    "<omitted>" 
    --#SUMMARY "Card Switchover completed from card %d to card %d"
    --#ARGUMENTS {0,1}
    --#STATE OPERATIONAL
    --#SEVERITY INFORMATIONAL
    ::= { starentTraps 1254 }

When however I compile the same MIB in Unbrowse SNMP both OIDs are decoded correctly.

What might I be doing wrong? I don't have much experience with SNMP in Wireshark, so it could be something simple..

Thanks in advance!

answered 2018-02-28 22:09:56 +0000

Jaap

13730 ●684 ●115

The fact that you need to suppress SMI errors when loading the MIB tells me that the SMI library (SMIib) gives up loading the MIB, so won't facilitate in name resolution for these objects. Try cleaning up the MIB (you can use smilint to check) before loading it.

SMIlib is a stricter SNMP library than Net-SNMP for instance. That could explain the difference with other tools.

edit flag offensive delete link

Comments

Jaap:

Thanks for your reply (and also formatting my OID definitions earlier). Btw here's what I got when compiling this MIB using Unbrowse SNMP - apparently they're all warnings not errors:

[no path]:[0]   S01   failed to locate MIB module `IPV6-TC'
[no path]:[0]   S01   failed to locate MIB module `INET-ADDRESS-MIB'
[no path]:[0]   S01   failed to locate MIB module `RADIUS-AUTH-CLIENT-MIB'
[no path]:[0]   S01   failed to locate MIB module `RADIUS-ACC-CLIENT-MIB'
C:/Users/admin/Desktop/starent.my:[8507]   S01 other  parse error, expecting `LOWERCASE_IDENTIFIER'
C:/Users/admin/Desktop/starent.my:[8508]   S01 other  parse error
C:/Users/admin/Desktop/starent.my:[14499]   S01   unknown object identifier label `radiusAuthServerIndex'
C:/Users/admin/Desktop/starent.my:[14499]   S01   unknown object identifier label `radiusAuthServerAddress'
C:/Users/admin/Desktop/starent.my:[14562]   S01   unknown object identifier label `radiusAccServerIndex'
C:/Users/admin/Desktop/starent.my:[14562]   S01   unknown object identifier label `radiusAccServerAddress'
C:/Users ...

(more)

dandreye ( 2018-02-28 22:21:21 +0000 )edit

Update: works fine after finding a comma in front of a closing bracket and removing it. Thank you!

dandreye ( 2018-02-28 23:02:33 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Starent SNMP traps not decoded

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Starent SNMP traps not decoded edit

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Starent SNMP traps not decoded