Research and Development

MIBparse.pl has been designed as an offline parser to quickly parse output from SNMP tools such as ‘snmpwalk’.

MIBparse.pl has been designed as an offline parser to quickly parse output from SNMP tools such as ‘snmpwalk’ (NET-SNMP project ‘net-snmp.sourceforge.net’). The output returned depends on the options that are selected by the user. Typically, information relating to the system, services, open ports, users, shares and installed components is some of the information that can be extracted by the tool.

Requirements

The only requirement is Perl.

Running

The simplest way to run the tool is as follows:

./MIBparse -f public.txt

Where “public.txt” is the output from ‘snmpwalk’ piped to a file. In this mode all available information is displayed to the user as standard out.

The information that is output can be tailored using the ‘-a’ flag. The following values can be used in conjunction with this flag:
1 = All
2 = System
3 = Routing information
4 = Services
5 = TCP ports
6 = UDP ports
7 = Users
8 = Shares
9 = Domain
10 = Installed components
11 = Community strings

Each value corresponds to the type of information that is output. As an example, ‘-a 7′ will output all of the users from a Windows system. The example execution in this case would include:

./MIBparse.pl -f public.txt -a 7

If you wish to execute the tool from a working directory which is not in your $PATH then the ‘-b’ option can be used to specify the location of the ‘tags’ file. This option can also be used to specify any file as a tags file as long as the format of the file conforms to the example that is provided. The example execution in such a case would be:

./MIBparse.pl -f public.txt -b ./tags

or:

./MIBparse.pl -f public.txt -b ./mytagsfile

Finally, the ‘-b’ flag can be used in conjunction with the ‘-a’ flag. The example execution in such a case would be:

./MIBparse.pl -f public.txt -b ./mytagsfile -a 7
MIBparse-0 1 1 Tar
MIBparse-0_1_1.tar.gz
April 26, 2013
25.6 KiB
MD5 hash: 39d4410a7dda51c2cafe728ff5814096
Details

Request to be added to the Portcullis Labs newsletter

We will email you whenever a new tool, or post is added to the site.

Your Name (required)

Your Email (required)