How CIM Discovery works

How CIM Discovery Works

Processing flow

  1. The Shazzam probe launches the wbem port probe as part of network discovery.
  2. The wbem port probe detects activity on target ports SLP 427, CIM 5989 and 5988, and then examines the Service Registry Queries related list, at Discovery Definition > Port Probes, for the SLP query. The base system provides this query is provided to detect the service:wbem service type, which indicates the presence of an SLP server.
  3. The Shazzam probe launches a scanner for the WBEM service type. The scanner retrieves:
    • The attributes of the service from the SLP server.
    • The interop namespaces of CIM servers in the network.
  4. The scanner appends the namespace values it finds to the port probe results.
  5. The wbem port probe appends the SLP data it carries to the CIM Classify probe.
  6. The CIM Classify probe uses that information to explore the CIM servers.
    Figure 1. CIM Shazzam Processing Diagram

The webem port probe

The wbem probe stores the data it retrieves in the CIM Classification [discovery_classy_cim] table. To view the wbem port probe, navigate to Discovery Definition > Port Probes.

Figure 2. wbem port probe record

SLP query

The SLP query detects the wbem service (service:wbem) on an SLP server and gathers the attributes of the service. To view the SLP Query record, open the wbem port probe record and select SLP Query from the Service Registry Queries related list.

Figure 3. SLP Query record

CIM - Classify probe

The wbem port probe appends the SLP data it carries to the CIM - Classify probe before launching it. The CIM classification probe extracts VMware ESX serial numbers and connector relationships between the SAN and NAS components from CIM Servers in the network.

To access the CIM classification probe, navigate to Discovery Definition > Probes and select CIM - Classify from the list of probes.

Figure 4. CIM classification
Figure 5. CIM - Classify probe record