When I execute discovery for a network device, in the input payload I see something like this:
SNMP - Classify:253 OIDs
SNMP - Classify:320 OIDs
SNMP - Classify:1121 OIDs
What does those numbers actually indicate?
Is there anywhere that we can see all those OID's in ServiceNow?
Nothing really, I just used them to know that something came back. The key is what came back, you'd expect to see the sysDescr, sysOID at a minimum. We also use returns such as IP Forwarding and other queries to help the classification phase. Meaning, does it route, print, switch or power. You can see these determinations at the bottom of the SNMP Classify sensor. There was a time in my horse drawn discovery days that we relied more on the classification critera then sysOID. In todays discovery its kinda opposite. We started with just 400 SNMP SysOIDs, many of which I had to look up and load them into our OOB, now its thousands.. 🙂
Nothing really, I just used them to know that something came back. The key is what came back, you'd expect to see the sysDescr, sysOID at a minimum. We also use returns such as IP Forwarding and other queries to help the classification phase. Meaning, does it route, print, switch or power. You can see these determinations at the bottom of the SNMP Classify sensor. There was a time in my horse drawn discovery days that we relied more on the classification critera then sysOID. In todays discovery its kinda opposite. We started with just 400 SNMP SysOIDs, many of which I had to look up and load them into our OOB, now its thousands.. 🙂
