cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1396
Views
0
Helpful
2
Replies

Need help deciphering SNMP response

sdavids5670
Level 2
Level 2

There's an OID for NTP, 1.3.6.1.4.1.9.9.168.1.1.10.0, which returns a HEX-STRING value that's 8 bytes long.  Here's sample output, taken at 1 second intervals, for 1 minute:

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: FE 72 63 D4 88 07 B5 23

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: FF 72 63 D4 59 AF 61 43

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 00 73 63 D4 AE 32 43 62

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 01 73 63 D4 C1 2F BD 82

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 02 73 63 D4 3C 08 6A FC

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 04 73 63 D4 3E 95 5E 18

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 05 73 63 D4 54 6A 44 3F

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 06 73 63 D4 FA EE B8 5A

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 07 73 63 D4 75 E2 42 7D

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 08 73 63 D4 32 A6 FA 9D

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 09 73 63 D4 33 68 6A BB

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 0A 73 63 D4 0D 23 29 DD

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 0C 73 63 D4 CB 9C 2B 00

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 0D 73 63 D4 9C 57 29 1C

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 0E 73 63 D4 CE 2A 8D 3D

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 0F 73 63 D4 56 2B 56 7E

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 10 73 63 D4 EC D2 88 A1

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 11 73 63 D4 BF FF 1D C2

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 12 73 63 D4 FD 31 4B DE

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 14 73 63 D4 43 21 A6 03

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 15 73 63 D4 07 6F D7 23

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 16 73 63 D4 23 30 04 41

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 17 73 63 D4 D1 D6 DE 61

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 18 73 63 D4 E9 E1 F3 7E

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 19 73 63 D4 6D 1A 47 B5

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 1A 73 63 D4 3F F5 77 DA

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 1B 73 63 D4 CE 75 FF F9

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 1D 73 63 D4 DA 79 36 17

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 1E 73 63 D4 68 7A 2B 37

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 1F 73 63 D4 FD FB CA 5A

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 20 73 63 D4 CB F0 3A 7C

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 21 73 63 D4 00 93 7D A2

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 22 73 63 D4 4D 8C A6 C1

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 23 73 63 D4 85 D2 9D DF

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 25 73 63 D4 EF FA A2 01

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 26 73 63 D4 43 06 D6 1E

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 27 73 63 D4 C2 89 0D 3E

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 28 73 63 D4 4D 2A 0E 5F

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 29 73 63 D4 B5 21 C3 7D

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 2A 73 63 D4 17 D3 12 A2

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 2B 73 63 D4 06 74 CB C1

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 2C 73 63 D4 89 61 26 E1

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 2E 73 63 D4 3E 4C 02 05

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 2F 73 63 D4 49 47 23 25

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 30 73 63 D4 60 33 E1 41

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 31 73 63 D4 50 32 EE 61

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 32 73 63 D4 52 EE 9D 82

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 33 73 63 D4 AE F3 2E A2

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 34 73 63 D4 0B D2 E2 C2

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 35 73 63 D4 DF 7B 8B E1

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 37 73 63 D4 3C D2 5E 08

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 38 73 63 D4 4A D3 41 28

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 39 73 63 D4 38 F6 19 4A

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 3A 73 63 D4 75 9F BC 6F

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 3B 73 63 D4 2C 47 9C 8F

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 3C 73 63 D4 B7 E7 32 AF

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 3D 73 63 D4 66 04 64 CC

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 3E 73 63 D4 C9 0C 6F E8

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 40 73 63 D4 DF C3 88 09

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 41 73 63 D4 4C 9C E4 29

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: FE 72 63 D4 88 07 B5 23

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: FF 72 63 D4 59 AF 61 43

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 00 73 63 D4 AE 32 43 62

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 01 73 63 D4 C1 2F BD 82

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 02 73 63 D4 3C 08 6A FC

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 04 73 63 D4 3E 95 5E 18

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 05 73 63 D4 54 6A 44 3F

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 06 73 63 D4 FA EE B8 5A

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 07 73 63 D4 75 E2 42 7D

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 08 73 63 D4 32 A6 FA 9D

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 09 73 63 D4 33 68 6A BB

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 0A 73 63 D4 0D 23 29 DD

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 0C 73 63 D4 CB 9C 2B 00

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 0D 73 63 D4 9C 57 29 1C

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 0E 73 63 D4 CE 2A 8D 3D

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 0F 73 63 D4 56 2B 56 7E

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 10 73 63 D4 EC D2 88 A1

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 11 73 63 D4 BF FF 1D C2

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 12 73 63 D4 FD 31 4B DE

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 14 73 63 D4 43 21 A6 03

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 15 73 63 D4 07 6F D7 23

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 16 73 63 D4 23 30 04 41

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 17 73 63 D4 D1 D6 DE 61

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 18 73 63 D4 E9 E1 F3 7E

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 19 73 63 D4 6D 1A 47 B5

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 1A 73 63 D4 3F F5 77 DA

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 1B 73 63 D4 CE 75 FF F9

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 1D 73 63 D4 DA 79 36 17

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 1E 73 63 D4 68 7A 2B 37

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 1F 73 63 D4 FD FB CA 5A

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 20 73 63 D4 CB F0 3A 7C

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 21 73 63 D4 00 93 7D A2

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 22 73 63 D4 4D 8C A6 C1

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 23 73 63 D4 85 D2 9D DF

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 25 73 63 D4 EF FA A2 01

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 26 73 63 D4 43 06 D6 1E

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 27 73 63 D4 C2 89 0D 3E

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 28 73 63 D4 4D 2A 0E 5F

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 29 73 63 D4 B5 21 C3 7D

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 2A 73 63 D4 17 D3 12 A2

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 2B 73 63 D4 06 74 CB C1

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 2C 73 63 D4 89 61 26 E1

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 2E 73 63 D4 3E 4C 02 05

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 2F 73 63 D4 49 47 23 25

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 30 73 63 D4 60 33 E1 41

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 31 73 63 D4 50 32 EE 61

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 32 73 63 D4 52 EE 9D 82

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 33 73 63 D4 AE F3 2E A2

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 34 73 63 D4 0B D2 E2 C2

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 35 73 63 D4 DF 7B 8B E1

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 37 73 63 D4 3C D2 5E 08

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 38 73 63 D4 4A D3 41 28

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 39 73 63 D4 38 F6 19 4A

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 3A 73 63 D4 75 9F BC 6F

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 3B 73 63 D4 2C 47 9C 8F

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 3C 73 63 D4 B7 E7 32 AF

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 3D 73 63 D4 66 04 64 CC

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 3E 73 63 D4 C9 0C 6F E8

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 40 73 63 D4 DF C3 88 09

SNMPv2-SMI::enterprises.9.9.168.1.1.10.0 = Hex-STRING: 41 73 63 D4 4C 9C E4 29

From left to right, it's pretty clear that the first four bytes are some sort of number of seconds since a particular reference time.  If you take &HD4637341 and covert it to decimal you get 3,563,287,361 seconds.  This is too high to be a UNIX timestamp.  It might be the number of seconds that have elapsed since Jan 1, 1900, though, because that lines up pretty closely (haven't done the exact math but it's clearly in the ballpark).  What are bytes 5 through 8, though?  They're jumping all over the map.  I cannot imagine that a 32-bit value would be used for time calculations less than 1 second because it doesn't seem like time would be measured that precisely but maybe I'm wrong.  Any thoughts?


Regards,
Steven

1 Accepted Solution

Accepted Solutions

ngoldwat
Level 4
Level 4

HI,

Digging around in the MIB I found:

NTPTimeStamp ::= TEXTUAL-CONVENTION
    STATUS          current
    DESCRIPTION            "NTP timestamps are represented as a 64-bit
            unsigned fixed-point number, in seconds relative to
            00:00 on 1 January 1900.  The integer part is in the
            first 32 bits and the fraction part is in the last
            32 bits.
"

    REFERENCE
            "D.L. Mills, 'Network Time Protocol (Version 3)',
                RFC-1305, March 1992, Section 3.1"
    SYNTAX          OCTET STRING (SIZE (8))

View solution in original post

2 Replies 2

ngoldwat
Level 4
Level 4

HI,

Digging around in the MIB I found:

NTPTimeStamp ::= TEXTUAL-CONVENTION
    STATUS          current
    DESCRIPTION            "NTP timestamps are represented as a 64-bit
            unsigned fixed-point number, in seconds relative to
            00:00 on 1 January 1900.  The integer part is in the
            first 32 bits and the fraction part is in the last
            32 bits.
"

    REFERENCE
            "D.L. Mills, 'Network Time Protocol (Version 3)',
                RFC-1305, March 1992, Section 3.1"
    SYNTAX          OCTET STRING (SIZE (8))

Thanks!