[c-nsp] Identifying SPAN ports via SNMP?

[Hank Nussbacher]

At 07:45 PM 04-11-06 -0500, lee.e.rian at census.gov wrote:

>-- portCopyTable defined in SMON-MIB.
>
>
>Here's the info returned by one of our Sup720s configured with
>   monitor session 1 source interface Gi5/1 tx
>   monitor session 1 destination interface Fa9/48
>
>% snmpwalk sup720 portCopyTable
>SMON-MIB::portCopyDestDropEvents.29.104 = Counter32: 0 events
>SMON-MIB::portCopyDirection.29.104 = INTEGER: copyTxOnly(2)
>SMON-MIB::portCopyStatus.29.104 = INTEGER: notReady(3)
>% snmpwalk sup720 ifName.29
>IF-MIB::ifName.29 = STRING: Gi5/1
>% snmpwalk sup720 ifName.104
>IF-MIB::ifName.104 = STRING: Fa9/48
>%
>
>hrmmm... INTEGER: notReady(3) I'm guessing the sniffer has been "borrowed"
>sup720>sh int f9/48
>FastEthernet9/48 is down, line protocol is down (monitoring)

SPAN ports should look like this (at least on 12.2(18)SXE5):

GigabitEthernet9/39 is up, line protocol is down (monitoring)

 From the IOS MIB:

petach-tikva-gp#show snmp mib | incl portCopy
portCopyDestDropEvents
portCopyDirection
portCopyStatus
portCopyLoVlanMask
portCopyHiVlanMask
portCopyDestLoVlanMask
portCopyDestHiVlanMask
portCopyOption
portCopySessionNo
portCopySessionType
portCopyRemoveSrc
portCopyReflectorPort
portCopyInpktVlan
portCopyMaxIngressSessions
portCopyMaxEgressSessions

But when running Getif on portCopyTable the only entries are the 3 as Lee 
has indicated.

-Hank Nussbacher
http://www.interall.co.il