fix: stop search for enterprise oid (#888)

splunk · Oct 11, 2023 · 5d0d9b9 · 5d0d9b9
1 parent 866f276
commit 5d0d9b9
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -8,6 +8,7 @@
 
 ### Fixed
 - empty profile name when MIB family name and a polled varbind differs
+- stop mib search on vendor if oid is for enterprise tree
 
 ## [1.9.2]
 

diff --git a/splunk_connect_for_snmp/snmp/manager.py b/splunk_connect_for_snmp/snmp/manager.py
@@ -390,10 +390,9 @@ def load_mibs(self, mibs: List[str]) -> None:
                     logger.warning(f"Error loading mib for {mib}, {e}")
 
     def is_mib_known(self, id: str, oid: str, target: str) -> Tuple[bool, str]:
-
         oid_list = tuple(oid.split("."))
-
-        start = 5
+        # if oid match enterprise, then search should stop if there is no match to vendor
+        start = 6 if oid.startswith("1.3.6.1.4.1") else 5
         for i in range(len(oid_list), start, -1):
             oid_to_check = ".".join(oid_list[:i])
             if oid_to_check in self.mib_map: