Wireshark · Ethereal-users: [Ethereal-users] Re: SNMP Capture Data inquiry

[Jose Vicente Quinto <joe.v.r.quinto@xxxxxxxxxxxxxxxxx>]

Hello everyone,

Good day.

I have an SNMP GET-Request PDU here with two Object IDs, the start of 
the SNMP packet is at row '0020' from the sequence '30 43 02 ...' up to
the end ('... 08 01 05 00'). 

0000   00 50 81 20 00 00 00 0b db 80 e0 56 08 00 45 00  .P. .......V..E.
0010   00 61 88 7c 00 00 80 11 00 00 c8 01 1f 8c c8 01  .a.|............
0020   1f 23 0a 86 00 a1 00 4d 19 f7 30 43 02 01 00 04  .#.....M..0C....
0030   06 70 75 62 6c 69 63 a0 36 02 02 60 5d 02 01 00  .public.6..`]...
0040   02 01 00 30 2a 30 13 06 0f 2b 06 01 04 01 0b 02  ...0*0...+......
0050   0e 0b 01 03 01 01 09 01 05 00 30 13 06 0f 2b 06  ..........0...+.
0060   01 04 01 0b 02 0e 0b 01 03 01 01 08 01 05 00     ...............

Can anyone explain to me what are the purpose of the initial values before 
the actual ObjectID (before '2b 06 01 ... 01 05 00')?

Is it correct that "43" in the first 2 bytes -- '30 43', the '43' (decimal 67)
is the length of the whole SNMP data received that must be decoded, parsed
then encoded again for the sending of the RESPONSE PDU? After '30 43', 
I counted that there are 67 bytes total up to the end of the SNMP packet.

Hoping for your reply as soon as you can.

Thanks in advance.

Regards,
Jovic


-- 
Jose Vicente Quinto <joe.v.r.quinto@xxxxxxxxxxxxxxxxx>
ADTX Systems, Inc.