engine IDs, engineID, EngineBoot

Watch for duplicated engine IDs:

tshark -i any -Y '(udp.srcport == 161) && (snmp.msgAuthoritativeEngineID == 80:00:0d:2f:04:46:49:31:4d:49:4c:42:33:34)' -T fields -e ip.src -e snmp.msgAuthoritativeEngineID -e snmp.msgAuthoritativeEngineTime -e snmp.msgAuthoritativeEngineBoots -e frame.time

It should print output like this:

192.168.88.1   80000d2f044649314d494c423334    10566621 3       Dec 11, 2020 12:35:10.168598000 EET
192.168.88.1   80000d2f044649314d494c423334    10566631 3       Dec 11, 2020 12:35:20.169290000 EET
192.168.88.1   80000d2f044649314d494c423334    10566712 3       Dec 11, 2020 12:36:41.363684000 EET
192.168.88.1   80000d2f044649314d494c423334    10566712 3       Dec 11, 2020 12:36:41.364202000 EET
192.168.88.1   80000d2f044649314d494c423334    10566722 3       Dec 11, 2020 12:36:51.374463000 EET

Capture each device's engineID:

timeout 120 tcpdump -i ens33 -w /tmp/v3traps.pcap 'udp port 162'
dnf -y install wireshark-cli
tshark -r /tmp/v3traps.pcap -Tfields -e ip.src -e snmp.msgAuthoritativeEngineID 2>/dev/null | sort -u