Registrations to Open-AudIT forums are now closed. To ask any new questions please visit Opmantek Community Questions.

Open-AudIT

What's on your network?
It is currently Fri Mar 29, 2024 7:02 pm

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 4 posts ] 
Author Message
PostPosted: Wed Mar 05, 2014 5:22 am 
Offline
Newbie

Joined: Thu Feb 27, 2014 10:54 pm
Posts: 12
Hi all,
I want to preface this with "I'm not a Windows person" I am Unix/Linux, but my boss wanted this on a win based OS.
I ran three subnet based discoveries (class b subnets) over night and came in the next day to find them still running and slowing the 2 v-cpu server to it's knees.
Is this due to the fact that three discoveries are too much for the system ? Also other than killing the cscript processes to stop the discovery, is there a better way to do this?

Thanks,
luvdablus :?:


Top
 Profile  
Reply with quote  
PostPosted: Wed Mar 05, 2014 2:29 pm 
Offline
Site Admin
User avatar

Joined: Mon Jun 07, 2004 11:48 am
Posts: 1964
Location: Brisbane, Australia
Running three discoveries simultaneously on 255x255 hosts (ie - 255x255x3 = 195,075 hosts) is a lot to expect a single server to chew it's way through, even overnight. The only way to stop the scripts is to kill them with task manager (at least at the moment).

I would suggest breaking it up into smaller chunks.

We have scripts to audit a subnet which can be run from separate Windows servers - but not actual "Discovery" scripts to do this (yet). The audit scripts use Nmap to probe an IP and if it is a Windows machine, audit it.

As you're running on Windows, you can copy the audit_subnet_windows.vbs and audit_windows.vbs scripts to another host (which will need Nmap installed) and have those hosts perform the auditing and submission to the Open-AudIT server. You can also use audit_subnet.vbs which will use Nmap on the target addresses, but not "audit" (a la Windows audit) them. Best to run audit_subnet_windows first to populate your Windows PCs into Open-AudIT, and then audit_subnet to pickup any other network devices.

Having the ability to run Discovery as such (like the web pages do) from remote hosts is on our list of features. If you are interested in supporting Open-AudIT, please do email me or the guys at [url]https://opmantek.com[/url]

_________________
Support and Development hours available from [url=https://opmantek.com]Opmantek[/url].
Please consider a purchase to help make Open-AudIT better for everyone.


Top
 Profile  
Reply with quote  
PostPosted: Wed May 21, 2014 3:22 am 
Offline
Newbie

Joined: Thu Feb 27, 2014 10:54 pm
Posts: 12
Solved thanks to mark!!!


Top
 Profile  
Reply with quote  
PostPosted: Thu May 22, 2014 1:30 am 
Offline
Newbie

Joined: Thu Feb 27, 2014 10:54 pm
Posts: 12
[quote="luvdablus"]Solved thanks to mark!!!


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 4 posts ] 

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group