Status updates scans: SNMP ARP scan does not store discovered device's MAC addresses

[rokkhan]

Hi,

When I am doing a Discovery SNMP ARP SCAN it works ok, it records the founded IP and Mac adreses but I run an update scan it does not store found MAc adreses.

The mac adresses are learned by the script as debug output shows but mac adreses are not recorded in the IP registry.

[SRO15040001] => Array
(
[get_arp_table] => Array
(
[0] => Array
(
[ip] => 10.65.37.220
[mac] => 08:97:34:7a:7e:40
[port] => ethernet0/0.20
[portname] => ethernet0/0.20
)

                [1] => Array
                    (
                        [ip] => 10.65.37.221
                        **[mac] => 40:a8:f0:f3:c6:60**
                        [port] => ethernet0/0.20
                    )

                [2] => Array
                    (
                        [ip] => 10.60.37.70
                        **[mac] => 00:d0:2d:f6:fa:1a**
                        [port] => ethernet0/0.40
                        [portname] => ethernet0/0.40
                    )

                [3] => Array
                    (
                        [ip] => 10.60.37.71
                        **[mac] => 8c:e7:48:1a:06:61**
                        [port] => ethernet0/0.40
                    )

                [4] => Array
                    (
                        [ip] => 10.187.34.245
                        **[mac] => cc:e1:7f:0c:70:ce**
                        [port] => ethernet0/1.7
                        [portname] => ethernet0/1.7
                    )

            )

    )

Thanks in advance

[rokkhan]

I have updated to current master development branch 1.4 dbversion20 and I am still having same issue.

[GaryAllan]

Hello @rokkhan

Whoever wrote the code designed it that way....What are you expecting the script to do?

See // check if host already exists, than remove it in /app/subnets/scan/subnet-scan-execute-snmp-mac.php

 foreach ($res as $kr=>$r) {
               // if is inside subnet
               if ($Subnets->is_subnet_inside_subnet ($r['ip']."/32", $Subnets->transform_address($subnet->subnet, "dotted")."/".$subnet->mask)===false) { }
               // check if host already exists, than remove it
               elseif (in_array($r['ip'], $subnet_ip_addresses)) { }
               // save
               else {
                   $found_arp[] = $r;
               }
           }

[rokkhan]

Hi,

Maybe has been a misunderstood by me.

"Discovery scans: SNMP ARP scan" does discover every device in a subnet and stores the mac adress of the device in the IP record.

How can this job be automated? I have configured cronjobs for running discoveryCheck.php, resolveIPaddresses.php and pingCheck.php scripts, but none os these stores the mac address of the discovered devices.

Only shows "-- autodiscovered --" in the description.

Thought that update scans will store the mac adddress but it looks like it is no designed to work this way.

Any idea of how can be stored or changed the mac address of the discovered devices?

Thanks in advance.

[Saiirys]

Having the same "issue".

Whenever i want to get the MAC address of already discovered devices in my subnet, i have to delete those devices to do a manual Discovery SNMP ARP Scan since the Status Update over ARP doesnt seem to add MAC addresses.

Shouldn't there be a way to automatically do that?

[rokkhan]

Anyone that could help us?

[nbartokos]

Hello!

I still have the same problem. Is there any way to store the MAC on a automatic update? Even if I manually start the SMNP ARP update, it only checks for new host and doesnt update MAC addresses.

I tired to code it by myself but without access. Someone can help?

[nbartokos]

Hello! I've finally got it working!

I have changed some files to store the mac address in the database when I start an update scan.
Add following lines to the files:

functions/classes/class.Scan.php: (somewhere)

function ping_update_mac($ip, $mac) {
try { $this->Database->updateObject("ipaddresses", array("id"=>$id, "mac"=>$mac), "id"); }
catch (Exception $e) {
!$this->debugging ? : $this->Result->show("danger", $e->getMessage(), false);
!$this->debugging ? : $this->Log->write ("status_update", _('Failed to update mac address'), 0);
}
}

app/subnets/scan/subnet-scan-execute-update-snmp-arp.php: (Line 76)

@$Scan->ping_update_mac($result[$Subnets->transform_address($r['ip'], "decimal")]['id'], $r['mac']);

[guif]

Hi! Error 500 when put "public function" instead "function".
btw didn't see any update on mac address value.

[nbartokos]

Hello.

Yeah, that was my fault. You don't need the "public" suffix.
But then, storing the mac addresses should work. For me, it works.

Did you add the line in the second file too?

[clearnetworx]

I am running version 1.5 and have done the code modification above from nbartokos. I see the MAC addresses when I run a Status Update Scans: SNMP ARP Scan but the database does not seem to get populated. This is where I assumed line 76 is (nano does not show me the line number):

                       $result[$Subnets->transform_address($r['ip'], "decimal")]['status'] = "Online";
                       // update alive time
                       @$Scan->ping_update_lastseen($result[$Subnets->transform_address($r['ip'], "decimal")]['id']);
                       // Added per nbartokos, update MAC addresses
                       @$Scan->ping_update_mac($result[$Subnets->transform_address($r['ip'], "decimal")]['id'], $r['mac']);