Press "Enter" to skip to content

Month: November 2008

SNMPget & SNMPwalk

Lets say in your network you have a lot of routers/switches and when you perform a traceroute you dont know what the hostname is of each device, or for example you need to know more information on the device and what IOS/firmware its running, and what ip addresses are assigned.

For example I need to know what 192.168.1.1 is in my network, and say I have SNMP enabled on my devices we can use a mix of SNMPget and SNMPwalk to find more details. Now this can only be performed on linux, so in this case i am using ubuntu.

root@ubuntu:~# snmpget -v 2c -c public 192.168.1.1 sysName.0
SNMPv2-MIB::sysName.0 = STRING: dd-wrt

sysName.0 shows the device name

root@ubuntu:~# snmpget -v 2c -c public 192.168.1.1 sysDescr.0
SNMPv2-MIB::sysDescr.0 = STRING: Linux DD-WRT 2.4.35 #2005 Tue May 20 01:17:43 CEST 2008 mips

sysDescr.0 shows the firmware used on device and version

root@ubuntu:~# snmpwalk -c public -v1 192.168.1.1 ipaddr
IP-MIB::ipAdEntAddr.192.168.1.1 = IpAddress: 192.168.1.1
IP-MIB::ipAdEntAddr.200.100.1.1 = IpAddress: 200.100.1.1
IP-MIB::ipAdEntAddr.127.0.0.1 = IpAddress: 127.0.0.1
IP-MIB::ipAdEntAddr.169.254.255.1 = IpAddress: 169.254.255.1
IP-MIB::ipAdEntIfIndex.192.168.1.1 = INTEGER: 7
IP-MIB::ipAdEntIfIndex.200.100.1.1 = INTEGER: 77
IP-MIB::ipAdEntIfIndex.127.0.0.1 = INTEGER: 1
IP-MIB::ipAdEntIfIndex.169.254.255.1 = INTEGER: 7
IP-MIB::ipAdEntNetMask.192.168.1.1 = IpAddress: 255.255.255.0
IP-MIB::ipAdEntNetMask.200.100.1.1 = IpAddress: 255.255.255.255
IP-MIB::ipAdEntNetMask.127.0.0.1 = IpAddress: 255.0.0.0
IP-MIB::ipAdEntNetMask.169.254.255.1 = IpAddress: 255.255.0.0
IP-MIB::ipAdEntBcastAddr.192.168.1.1 = INTEGER: 1
IP-MIB::ipAdEntBcastAddr.200.100.1.1 = INTEGER: 1
IP-MIB::ipAdEntBcastAddr.127.0.0.1 = INTEGER: 1
IP-MIB::ipAdEntBcastAddr.169.254.255.1 = INTEGER: 1

snmpwalk shows what ip addresses are on that device

  • Note in all the above cases the device has to have SNMP enabled, in corporate networks i would suggest enabling this feature however having a different read-only snmp string other than public due to security implications. Also it is important to know there is 3 types of SNMP versions v1,v2,v3, so you can set it up depending what the device supports. v2 of SNMP is quite common on many devices.

If you wish to know more information on the above utilities visit the websites below:

SNMP Walk:
http://net-snmp.sourceforge.net/docs/man/snmpwalk.html

SNMP Get:
http://net-snmp.sourceforge.net/docs/man/snmpget.html

General SNMP Info:
http://en.wikipedia.org/wiki/Simple_Network_Management_Protocol

[ad#googleadd1]

Leave a Comment

Cisco VPN Client 64bit

Can you believe that Cisco do not make a 64bit version of their VPN client??! Ive had to install Windows XP in a Vmware session to use VPN, how insane is that! Cmon Cisco get moving with the times…

If anyone has a way around to getting the Cisco VPN Client working on Vista Ultimate 64bit please let me know! 🙂

3 Comments

Network Monitoring

I started to learn a bit more about network monitoring tools and how to monitor the network. One of these tools is “Whats UpGold”, which can monitor uptime on devices, probe for interface bandwidth utilization and various other items. I have just begun using this software to monitor 300+ cisco devices for uptime, bandwidth utilisation, and recommend it highly. One thing about it I like, you can setup maps of a town/city/state with dot points and if a device goes down the dot shows red, and if its up its green, so you exactly know when/where it goes down.

See website below for more info.

http://www.whatsupgold.com

Whats Up Gold network monitoring
Whats Up Gold network monitoring

Ipswitch WhatsUp Gold is the world’s leading network management software with over 70,000 networks reliably managed worldwide. Built on a scalable and extensible architecture offering automated device discovery and network mapping, real-time SNMP and WMI monitoring, and versatile alerting, notification, and reporting functionality, WhatsUp Gold delivers 360° visibility, actionable intelligence, and complete control.

Now if you have the $$$ this other superb tool offers far more in-depth monitoring called CA eHealth, it has a deeper inspection inside the network such as utilization, latency, uptime between interfaces, and capacity planning, and other very detailed reports, compared to WhatsUp Gold.

Apparently this tool for enterprises costs around $500,000AUD to have it setup, which is why this is only used by the best of the best network operation centres to monitor large and complex networks.

For more info http://www.ca.com/us/network-performance.aspx

CA eHealth
CA eHealth

Help ensure the network performance and availability of LANs, WANs, routers, switches and the technologies and the network services provided over them. CA eHealth® Network Performance Manager provides comprehensive, vendor-independent technology that enables you to pinpoint areas of network performance degradation and generate real-time management reports to identify the causes of problems.

Now you are probably wondering what about some FREE monitoring tools?! I personally use CACTI which is a fantastic monitoring tool for my home network, but can be used for business/large enterprise also. The tool is open source, and has a great support forum which is excellent. The tool is a network graphing solution and many examples can be found on its website what can be monitored.

http://www.cacti.net/

Using Cacti to monitor WAN traffic on DDWRT firmware routers
Using Cacti to monitor WAN traffic on DDWRT firmware routers

Cacti is a complete network graphing solution designed to harness the power of RRDTool‘s data storage and graphing functionality. Cacti provides a fast poller, advanced graph templating, multiple data acquisition methods, and user management features out of the box. All of this is wrapped in an intuitive, easy to use interface that makes sense for LAN-sized installations up to complex networks with hundreds of devices.

3 Comments