I am trying to do some heavy digging into SNMP, BPI+, ISP networks. Since wireshark can be used to capture network data, would I be able to use it to remotely capture my ISP SNMP agent information and view information being sent through it? Would this only work to capture my interactions alone to the SNMP agent?

I have seen different applications out there during my research such as MIB Browser and MIB Walker, and I am wondering if I could use wireshark to view the same type of information?


What do you mean 'remotely capture'?

If you can get the network traffic to your computer, you can use WinPCAP/WireShark to capture it.

Or if you can get a network device to remotely capture the data using something like http://www.routereflector.com/2013/05/embedded-packet-capture-tcpdump-on-cisco-ios-routers/ and can get it back you can analyse it in WireShark.

Summary: if you control a network link the SNMP queries go over, and the queries are not encrypted, yes you can, otherwise no you can't.

  • Sorry for the confusion, I meant can I capture SNMP data on the same node as mine on my cable network the same way I can view DHCP info(filtered using bootsp)? I am looking to get the same type of information a SNMP walk would provide. Or would I need to perform some kind of man in the middle capture? – user1632018 Mar 10 '14 at 23:58

You would be able to view SNMP information with Wireshark, if the information is going through the same network as customer traffic.

However, with properly set up networks, SNMP data is sent only via the management network, which is completely separate from actual customer connections. Therefore you would not see the traffic.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.