CDPSnarf

Published on 2008-02-04 17:42:47.

tags = {  "networking" ,  "security"   };

bookmarks = {  Digg! , Del.icio.us! , Google! , Slashdot! , Netscape! , Technorati! , Yahoo! , Stumbleupon! };

Description

CDPSnarf if a network sniffer exclusively written to extract information from CDP packets.
It provides all the information a "show cdp neighbors detail" command would return on a Cisco router and even more.
The application is written in C using the popular PCAP library.

Project homepage: https://github.com/Zapotek/cdpsnarf

Content

Samples

Cisco AIR-AP1231G-E-K9 Access Point

$ sudo ./cdpsnarf eth2
Waiting for a CDP packet...

[#0] Sniffed CDP advertisement with a size of 367 bytes.
-------------------------------------------------------
CDP Version: 2
TTL: 180 ms
Checksum: 0x7282

Device ID: cisco-ap.mydomain.net

Software version: Cisco IOS Software, C1200 Software (C1200-K9W7-M), Version 12.3(8)JEA, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2006 by Cisco Systems, Inc.
Compiled Wed 23-Aug-06 16:42 by kellythw

Platform: cisco AIR-AP1231G-E-K9

Addresses:  1
   Address #: 1
   Protocol type: [1] NLPID format
   Protocol: [0xCC] IP
   IP Address: 157.228.87.1


Port ID: Dot11Radio0

Capabilities:
   [0x02]       Transparent bridge


Cisco 7206VXR

$ sudo ./cdpsnarf eth1
Waiting for a CDP packet...

[#0] Sniffed CDP advertisement with a size of 371 bytes.
-------------------------------------------------------
CDP Version: 2
TTL: 180 ms
Checksum: 0xAC72

Device ID: cisco-01.lab

Software version: Cisco Internetwork Operating System Software
IOS (tm) 7200 Software (C7200-JK9SU2-M), Version 12.3(23), RELEASE SOFTWARE (fc5)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2007 by cisco Systems, Inc.
Compiled Tue 24-Jul-07 21:41 by stshen

Platform: cisco 7206VXR

Addresses:  1
   Address #: 1
   Protocol type: [1] NLPID format
   Protocol: [0xCC] IP
   IP Address: 192.168.0.10


Port ID: FastEthernet0/0

Capabilities:
   [0x01]       Router

Duplex: [0x00] Half

Releases

Version Stage Description Filename Download
0.1.1 alpha First release of CDPSnarf after minor bugfixes. CDPSnarf-v01.1.tar.bz2 Download
0.1.2 alpha CDPSnarf-v0.1.2.tar.bz2 Download
0.1.3 beta CDPSnarf moved to beta stage as of version 0.1.3 since most bugs were discovered and fixed. CDPSnarf-v0.1.3.tar.bz2 Download
0.1.4 beta See included BUGFIXES file for changes. CDPSnarf-v0.1.4.tar.bz2 Download
0.1.5 beta Many bugfixes, optimizations and code cleanning since last release.
See included CHANGELOG.		 CDPSnarf-v0.1.5.tar.bz2 Download
0.1.6 beta Added support for the "IP Prefixes/Gateway" CDP field CDPSnarf-v0.1.6.tar.bz2 Download