Which IP address is collected by the CSPC collector?

[John Choi]

Hello,

This is a direct question from customer. He has multiple IP addresses configured on a device, and asked A) how the collector determines which IP address to collect, as well as B) through which port it is collected.

TIA,

John (EPM for Korea and ASEAN)

[Sanjeev Sayeeraman · Accepted solution]

Hi,

  All the IP addresses configured on the device would be listed. There is an interface summary also possible which lists all interfaces and ip addresses.In order to discover network devices and collect the data from the devices, you need to enter the credentials first. part of that is adding IP address ranges. This will help collect on a device. Th various ports used for SNMP query ( 161) and https  upload (443) are listed in the security whitepaper. Hope this helps

Thanks

-Sanjeev

[John Choi]

Hi Sanjeev,

Thanks very much for your response. I understand how the CSPC collects information when a Seed File is used, but what about in case of IP ranges? Is it whatever port responds first to the ICMP and SNMP ping? or is there a set order?

Thanks again,

John

[Sanjeev Sayeeraman]

Hi John

we are an SNMP shop. so its pretty much SNMP. ICMP is  used only as a fallback when SNMP fails to check if the IP is reachable.

Thanks

-sanjeev