Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Wiring Mess

From: Matt Moeller <moellermatthew@xxxxxxxxx>
Date: Fri, 22 Jan 2010 12:25:29 -0800 (PST)
If you can MIB walk the switches until you see the data you want then poll that mib across all of the switches.


From: Michael Glenn <MGlenn@xxxxxxxxxxxxxxx>
To: Community support list for Wireshark <wireshark-users@xxxxxxxxxxxxx>
Sent: Fri, January 22, 2010 11:06:18 AM
Subject: Re: [Wireshark-users] Wiring Mess

Interesting thought: I wonder if I could pull the spanning tree tables off my switches via SNMP and use them to build a database of port to MAC connections. I already have a table of all the user workstations' MAC addresses.


>>> Andrew Gallo akg1330@xxxxxxxxx> 01/22/2010 08:47 >>
....
Two options I see:

Make a matrix of mac addresses to jack number/office numbers and then
look at the switch's CAM table.  You'll then see what port goes to what
office.

If the switch is running spanning tree, you could sniff each port and
look at the source MAC of the BPDU.  This should be the MAC address of
the connected switchport.