Ethereal-users: Re: [Ethereal-users] enabling SNMP MIB object decode

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Andrew Hood <ajhood@xxxxxxxxx>
Date: Fri, 02 Sep 2005 07:54:25 +1000
Eichorn, David wrote:
> I'm using Ethereal to decode SNMP packets. It seems that it can use MIBs
> to map number-based OIDs to word-based OIDs. For example, in my decode,
> I would expect something like
>  
>     Object identifier 1: 1.3.6.1.2.1.1.3 (iso.3.6.1.2.1.1.3)
> to display as something like
>  
>     Object identifier 1: 1.3.6.1.2.1.1.3
> (iso.org.dod.internet.mgmt.mib-2.system.sysUpTime)
> I have the MIB file in the Ethereal\snmp\mibs directory, and I have the
> default list populated in Preferences:Protocols:SNMP:MIB modules to load
> (IP-MIB:IF-MIB:TCP-MIB:UDP-MIB:SNMPv2-MIB:RFC1213-MIB:UCD-SNMP-MIB).
> However, all I see is the number-based OIDs.
>  
>  
> *What am I missing?*

On Windows you need to replace the ":" with ";". There has been some
mention of this recently, as to whether Ethereal should automatically do
the replacement. I also notice that mouse-overing the text box pops up
this reminder.

I set "Preferences:Protocols:SNMP:MIB modules to load" to "ALL". It
takes longer to load, but stops things falling through the cracks.

> Here is my version info:
> Version 0.10.12 (C) 1998-2005 Gerald Combs <gerald@xxxxxxxxxxxx>
>  
> Compiled with GTK+ 2.4.14, with GLib 2.4.7, with WinPcap (version unknown),
> with libz 1.2.3, with libpcre 4.4, with Net-SNMP 5.2.1.2, with ADNS.
>  
> Running with WinPcap version 3.1 beta4 (packet.dll version 3, 1, 0, 24),
> based on libpcap version 0.8.3 on Windows 2000 Service Pack 4, build 2195.

-- 
There's no point in being grown up if you can't be childish sometimes.
                -- Dr. Who