How do you translate show snmp mib output to OID strings?

[jbulloch]

Hi community,

I've used solar winds and prime, which have an internal MIB database and don't require you to input the OID strings (though you can if you want and need to, as we've had to with some non-cisco products for our server team for instance). However, i have two devices in the device manager that won't update the image version even after an update and a reboot. So i began looking at  OID  pollers.

I've always undertand the "plain text" names shown by the show command to be human readable names for the MIB entries, and you can translate those to a particular OID string depending on version of SNMP and software.

Some have paticular numbers after them though, for instance "ciscoImageEntry.2" in v3 on our 9300's. According to a OID database i queried, this should be .1.3.6.1.4.1.9.9.25.1.1.1. If i'am correct on this part, where does the .2 come in to play? What am i missing here? Are there multiple OID options represented by this MIB entry? Would this instead be .1.3.6.1.4.1.9.9.25.1.1.1.2?

Thank you for your assistance. 

[Dan Frey · Accepted solution]

ciscoImageEntry does equal numeric oid 1.3.6.1.4.1.9.9.25.1.1.1.   The ".2" in ciscoImageEntry.2 is a reference to the tag being the second sequence and resolves to ciscoImageString.   

• ciscoImageEntry has SYNTAX of CiscoImageEntry
• CiscoImageEntry has two sequences with the second being ciscoImageString.
• ciscoImageString is the only readable object in the sequence.

ciscoImageEntry OBJECT-TYPE
    SYNTAX          CiscoImageEntry
    MAX-ACCESS      not-accessible
    STATUS          current
    DESCRIPTION
        "A image characteristic string entry."
    INDEX           { ciscoImageIndex } 
    ::= { ciscoImageTable 1 }

CiscoImageEntry ::= SEQUENCE {
        ciscoImageIndex  Integer32,
        ciscoImageString DisplayString
}

ciscoImageIndex OBJECT-TYPE
    SYNTAX          Integer32 (0..2147483647)
    MAX-ACCESS      not-accessible
    STATUS          current
    DESCRIPTION
        "A sequence number for each string stored
        in the IOS image." 
    ::= { ciscoImageEntry 1 }

ciscoImageString OBJECT-TYPE
    SYNTAX          DisplayString
    MAX-ACCESS      read-only
    STATUS          current
    DESCRIPTION
        "The string of this entry." 
    ::= { ciscoImageEntry 2 }

 ciscoImageString is indexed .1 to .8 in this example with a DisplayString as the value.

snmpwalk -v 2c -c xxxxxx 10.1.44.250 1.3.6.1.4.1.9.9.25.1.1.1.2
CISCO-IMAGE-MIB::ciscoImageString.1 = STRING: "CW_BEGIN$-gs-universalk9-m$"
CISCO-IMAGE-MIB::ciscoImageString.2 = STRING: "CW_IMAGE$X86_64_LINUX_IOSD-UNIVERSALK9-M$"
CISCO-IMAGE-MIB::ciscoImageString.3 = STRING: "CW_FAMILY$X86_64_LINUX_IOSD$"
CISCO-IMAGE-MIB::ciscoImageString.4 = STRING: "CW_FEATURE$IP|SLA|IPv6|IS-IS|FIREWALL|PLUS|QoS|HA|NAT|MPLS|VPN|LEGACY PROTOCOLS|3DES|SSH|APPN|IPSEC$"
CISCO-IMAGE-MIB::ciscoImageString.5 = STRING: "CW_VERSION$17.9.4a$"
CISCO-IMAGE-MIB::ciscoImageString.6 = STRING: "CW_MEDIA$RAM$"
CISCO-IMAGE-MIB::ciscoImageString.7 = STRING: "CW_SYSDESCR$Cisco IOS Software [Cupertino], Virtual XE Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 17.9.4a, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2023 by Cisco Systems, Inc.
Compiled Fri 20-+"
CISCO-IMAGE-MIB::ciscoImageString.8 = STRING: "CW_END$-gs-universalk9-m$"