From owner-agentx@dorothy.bmc.com  Tue Sep  4 01:08:26 2001
Received: from babbler.bmc.com (firebird.bmc.com [198.207.223.228])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id BAA20309
	for <agentx-archive@odin.ietf.org>; Tue, 4 Sep 2001 01:08:26 -0400 (EDT)
Received: from dorothy.bmc.com (localhost [127.0.0.1])
	by babbler.bmc.com (8.10.2/8.10.2) with ESMTP id f8459fV12314;
	Tue, 4 Sep 2001 00:09:42 -0500 (CDT)
Received: (from root@localhost)
	by dorothy.bmc.com (8.8.6 (PHNE_12836)/8.8.6) id WAA29445
	for agentx-list; Mon, 3 Sep 2001 22:02:56 -0700 (PDT)
Received: (from rpresuhn@localhost)
	by dorothy.bmc.com (8.8.6 (PHNE_12836)/8.8.6) id WAA29439;
	Mon, 3 Sep 2001 22:02:52 -0700 (PDT)
Date: Mon, 3 Sep 2001 22:02:52 -0700 (PDT)
From: Randy Presuhn <rpresuhn@dorothy.bmc.com>
Message-Id: <200109040502.WAA29439@dorothy.bmc.com>
To: agentx@dorothy.bmc.com
Subject: Fwd: PDU type
Cc: jnatale@sitaranetworks.com
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-agentx@dorothy.bmc.com
Precedence: bulk
List-Id: IETF Agentx Working Group mailing list <agentx.dorothy.bmc.com>
Content-Transfer-Encoding: 7bit

Hi -

I'm forwarding a non-subscriber posting to the agentx WG
mailing list.  Subscription instructions are at
http://www.ietf.org/html.charters/agentx-charter.html

 ------------------------------------------------------
 Randy Presuhn          BMC Software, Inc.  1-3141
 randy_presuhn@bmc.com  2141 North First Street
 Tel: +1 408 546-1006   San José, California 95131  USA
 ------------------------------------------------------
 My opinions and BMC's are independent variables.
 ------------------------------------------------------

> Received: from tattler.bmc.com (tattler.bmc.com [172.17.0.117])
> 	by dorothy.bmc.com (8.8.6 (PHNE_12836)/8.8.6) with ESMTP id QAA00330
> 	for <agentx@dorothy.bmc.com>; Sat, 1 Sep 2001 16:30:40 -0700 (PDT)
> Received: from mx-us-hou-1-int.bmc.com (localhost [127.0.0.1])
> 	by tattler.bmc.com (8.10.2/8.10.2) with ESMTP id f81NUZ716612
> 	for <agentx@dorothy.bmc.com>; Sat, 1 Sep 2001 18:30:35 -0500 (CDT)
> Received: from rios.sitaranetworks.com (rios.sitaranetworks.com [199.103.141.78])
> 	by mx-us-hou-1-int.bmc.com (Postfix) with SMTP id 9199A1FF002
> 	for <agentx@dorothy.bmc.com>; Sat,  1 Sep 2001 23:22:33 -0500 (CDT)
> Received: by rios.sitaranetworks.com with Internet Mail Service (5.5.2653.19)
> 	id <RMJA5QA3>; Sat, 1 Sep 2001 19:32:04 -0400
> Message-ID: <31269226357BD211979E00A0C9866DAB02AA84FD@rios.sitaranetworks.com>
> From: Jonathan Natale <jnatale@sitaranetworks.com>
> To: "'agentx@dorothy.bmc.com'" <agentx@dorothy.bmc.com>
> Subject: PDU type
> Date: Sat, 1 Sep 2001 19:31:58 -0400 
> MIME-Version: 1.0
> X-Mailer: Internet Mail Service (5.5.2653.19)
> Content-Type: text/plain;
> 	charset="iso-8859-1"
> 
> why is the pdu type "a1", "a2", "a3", "a4", or "a5" on a Sniffer, BUT all
> docs (for example "TCP/IP Illustrated Volume 1" -W.R.Stevens. Fig. 25.3,
> p.362) indicate it is "1", "2", "3", "4", or "5" ???
> 


From owner-agentx@dorothy.bmc.com  Tue Sep  4 02:09:10 2001
Received: from babbler.bmc.com (camaro.bmc.com [198.207.223.231])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id CAA04249
	for <agentx-archive@odin.ietf.org>; Tue, 4 Sep 2001 02:09:09 -0400 (EDT)
Received: from dorothy.bmc.com (localhost [127.0.0.1])
	by babbler.bmc.com (8.10.2/8.10.2) with ESMTP id f846B4o17150;
	Tue, 4 Sep 2001 01:11:04 -0500 (CDT)
Received: (from root@localhost)
	by dorothy.bmc.com (8.8.6 (PHNE_12836)/8.8.6) id XAA00716
	for agentx-list; Mon, 3 Sep 2001 23:07:39 -0700 (PDT)
Received: from tattler.bmc.com (tattler.bmc.com [172.17.0.117])
	by dorothy.bmc.com (8.8.6 (PHNE_12836)/8.8.6) with ESMTP id XAA00711
	for <agentx@dorothy.bmc.com>; Mon, 3 Sep 2001 23:07:35 -0700 (PDT)
Received: from mx-us-hou-1-int.bmc.com (localhost [127.0.0.1])
	by tattler.bmc.com (8.10.2/8.10.2) with ESMTP id f8467SG02518
	for <agentx@dorothy.bmc.com>; Tue, 4 Sep 2001 01:07:28 -0500 (CDT)
Received: from ihemail1.firewall.lucent.com (unknown [192.11.222.161])
	by mx-us-hou-1-int.bmc.com (Postfix) with SMTP id 45A6320EFC5
	for <agentx@dorothy.bmc.com>; Tue,  4 Sep 2001 05:56:45 -0500 (CDT)
Received: from md6370exch001p.wins.lucent.com (h135-114-206-50.lucent.com [135.114.206.50])
	by ihemail1.firewall.lucent.com (Switch-2.1.3/Switch-2.1.0) with ESMTP id f8468ix09527
	for <agentx@dorothy.bmc.com>; Tue, 4 Sep 2001 02:08:44 -0400 (EDT)
Received: by md6370exch001p.nse.lucent.com with Internet Mail Service (5.5.2650.21)
	id <RRV2FFAZ>; Tue, 4 Sep 2001 02:08:29 -0400
Message-ID: <BD842AF47D98D311BFC400508B5EBB8D01DDAA7D@md6370exch003u.nse.lucent.com>
From: "Natale, Robert C (Bob)" <bnatale@lucent.com>
To: jnatale@sitaranetworks.com
Cc: agentx@dorothy.bmc.com
Subject: RE: PDU type
Date: Tue, 4 Sep 2001 02:08:25 -0400 
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2650.21)
Content-Type: text/plain
Sender: owner-agentx@dorothy.bmc.com
Precedence: bulk
List-Id: IETF Agentx Working Group mailing list <agentx.dorothy.bmc.com>

> > From: Jonathan Natale <jnatale@sitaranetworks.com>
> > Date: Sat, 1 Sep 2001 19:31:58 -0400 

Hi Jonathan,

> > why is the pdu type "a1", "a2", "a3", "a4", or "a5" on a 
> > Sniffer, BUT all docs (for example "TCP/IP Illustrated Volume 1" 
> > -W.R.Stevens. Fig. 25.3, p.362) indicate it is "1", "2", "3",
> > "4", or "5" ???

The Sniffer dump is showing you the ASN.1/BER-encoded value of the
corresponding application-level value.

In most SNMP development environments you will find a header file
that defines the PDU types in a manner similar to this (from the
standard v3 winsnmp.h file at www.winsnmp.com):

   #define SNMP_PDU_GET   (ASN_CONTEXT | ASN_CONSTRUCTOR | 0x0)

Where previously in that header file (or a prior one) the following
defines (among others of this nature) would have been given to define
the PDU construct itself:

   #define ASN_CONTEXT       (0x80)
   #define ASN_CONSTRUCTOR   (0x20)

So, in the case of the Get PDU, this equates to 0x100 (160 decimal)
which yields a binary value of 10100000, which yields the nibbles
values of "a0"...and so forth.

Left me know if that is not clear or seems otherwise problematic
to you.

Thanks,

BobN


