On Fri, Jan 14, 2005 at 03:43:06PM -0500, Sorrell, Al wrote:
> > -----Original Message-----
> > From: Robert Story [mailto:[EMAIL PROTECTED] 
> > Sent: Friday, January 14, 2005 3:30 PM
> > To: Sorrell, Al
> > Cc: net-snmp-users@lists.sourceforge.net
> > Subject: Re: Trap packet decoder?
> > 
> > On Thu, 13 Jan 2005 16:20:05 -0500 Sorrell, wrote:
> > SA> Recently, I ran across a need to translate dumps of traps - in
> > SA> particular, these appear to be faulty traps generated by 
> > Cisco routers
> > SA> running older code levels. Is there anything in the 
> > current (5.1.1)
> > SA> NetSNMP packages that could take a hex dump and parse it 
> > without having
> > SA> to get into the C code with asn_parse, etc.? Or has 
> > someone in the user
> > SA> community come up with something similar?
> > 
> > There isn't anything like that in net-snmp. If you've got the 
> > whole packet,
> > something like tcpdump/Ethereal could probably help...
> 
> Unfortunately, I have the packet in hexdump (text) format... Series of
> hex words such as might be output from tcpdump/etehreal (it's actually
> being reported in a HP NNM error log as having bad data - as such it
> gives the packet info in hex/ASCII, but not a translation)

If you have the entire packet in hex data, write a short program
to parse the hex, stuff it into a datagram, and send it back out on
a network interface, like a loopback or to a non-routable destination
IP.  Sniff the interface with tcpdump/Ethereal, and now you can get it
parsed.

You might be able to use netcat or netcat.pl to get the packet back
out on the wire, which would simplify things.


-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt
_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Reply via email to