Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

NCM - MACForwarding table and Port field translation

Crew,

We would like to pull switch FDB information and corresponding port information from the NCM database. Seems easy enough - just run a SQL statement against the MACForwarding table. No luck. It appears the "port" field does not match up with a friendly name - the Ethernet addresses seem to be associated with a port number that I can't translate back to something more meaningful.

For example:

I see MAC XXXXXXXXXXXXXX Matching to port 56 on a Cisco 3750X switch stack in the MACForwarding table.

When I log-in to the switch and search the mac address:

show mac address-table address XXXXXXXXXXXXXX

          Mac Address Table
-------------------------------------------

Vlan    Mac Address       Type        Ports
----    -----------       --------    -----
   1    XXXX.XXXX.XXXX    DYNAMIC     Gi2/0/2
Total Mac Addresses for this criterion: 1

My question: Is there a mechanism for linking a record in the MACForwarding table based on port number to another table to translate it to a friendly name (ie Port 56 to Gi2/0/2)?

I have poked around in all of the tables, and I can't seem to find a table that I can link to and translate the name. I am probably missing something.

Find more posts tagged with

Accepted answers

All comments

dstj

I've built asp page with following SQL statement that does some pretty good user tracking (might be overkill for what you are looking for)...

SELECT
ARPTables.MAC,
ARPTables.IPAddress,
ARPTables.RDNSLookup,
Nodes.AgentIP,
Interfaces.InterfaceDescription,
Interfaces.InterfaceAlias,
Interfaces.MACAddress,
BridgePorts.VLANID,
Nodes.NodeCaption
FROM
MACForwarding
INNER JOIN Nodes ON (MACForwarding.NodeID=Nodes.NodeID)
INNER JOIN ARPTables ON (ARPTables.MAC=MACForwarding.MAC)
INNER JOIN VLANs ON (Nodes.NodeID=VLANs.NodeID)
INNER JOIN BridgePorts ON (VLANs.NodeID=BridgePorts.NodeID)
AND (MACForwarding.Port=BridgePorts.Port)
AND (VLANs.VLANID=BridgePorts.VLANID)
INNER JOIN Interfaces ON (BridgePorts.NodeID=Interfaces.NodeID)
AND (BridgePorts.InterfaceIndex=Interfaces.InterfaceIndex)
AND (MACForwarding.NodeID=Interfaces.NodeID)

Dave

FormerMember

Thanks Dave.

Unfortunately we are mostly layer 2 here. So the query doesn't work because the switches don't have a lot of ARP entries. Our forwarding table has plenty of L2 addresses without L3 addresses.

Thanks again!

dstj

no problem. With the above asp page, i can search by any of those fields and come up with results.

How about you try ? (last try)...

SELECT

MACForwarding.NodeID,
MACForwarding.LastDiscovery,
MACForwarding.FirstDiscovery,
MACForwarding.Missing,
MACForwarding.Port,
MACForwarding.MAC,
MACForwarding.Source,
MACForwarding.EntityID,
Entity_Physical.LastDiscovery,
Entity_Physical.FirstDiscovery,
Entity_Physical.Missing,
Entity_Physical.Name,
Entity_Physical.Description,
Entity_Physical.Type,
Entity_Physical.ContainedIn,
Entity_Physical.Class,
Entity_Physical.Position,
Entity_Physical.HardwareRevision,
Entity_Physical.FirmwareRevision,
Entity_Physical.SoftwareRevision,
Entity_Physical.Serial,
Entity_Physical.Manufacturer,
Entity_Physical.Model,
Entity_Physical.Alias,
Entity_Physical.AssetID,
Entity_Physical.FieldReplaceable,
Entity_Physical.EntityID,
Entity_Physical.NodeID
FROM
MACForwarding
INNER JOIN Entity_Physical ON (MACForwarding.Port=Entity_Physical.Position)
AND (MACForwarding.NodeID=Entity_Physical.NodeID)

Good luck !

Dave