Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: Re: [Wireshark-users] How to filter SNMP on object ID

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Luis EG Ontanon" <luis.ontanon@xxxxxxxxx>
Date: Mon, 15 Oct 2007 11:07:08 +0200

snmp.objectID_value is the value what you are looking is for the name so:

snmp.ObjectName == 1.3.6.1.2.1.2.2.1.16.7 should work for you

In development versions after 0.99.6 you could also filter this with:

mibs.ifOutOctets && mibs.ifEntry.ifIndex == 7

L

On 10/15/07, Dennis Perisa <dennis.perisa@xxxxxxxxx> wrote:
> Hi all,
>
> Can anyone give me an example of how to filter an SNMP packet on a specific
> object ID?  I seem to be having trouble using the built-in filter
> snmp.objectID_value.
>
> Here's an example of what I have tried thus far:
> snmp.objectID_value == 1.3.6.1.2.1.2.2.1.16.7
> ==> returns nothing
>
> Thanks in advance,
> Dennis
>
>
>
> _______________________________________________
> Wireshark-users mailing list
> Wireshark-users@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-users
>
>


-- 
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan

  • References:
    • [Wireshark-users] How to filter SNMP on object ID
      • From: Dennis Perisa
  • Prev by Date: [Wireshark-users] Please help with Lua dissector
  • Next by Date: [Wireshark-users] FC6 Wireshark 0.99.6 not showing latest live packets
  • Previous by thread: [Wireshark-users] How to filter SNMP on object ID
  • Next by thread: [Wireshark-users] Please help with Lua dissector
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation