Registrations to Open-AudIT forums are now closed. To ask any new questions please visit Opmantek Community Questions.

Open-AudIT

What's on your network?
It is currently Fri Mar 29, 2024 6:19 am

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 6 posts ] 
Author Message
 Post subject: Dual NIC
PostPosted: Wed Nov 14, 2007 8:23 am 
Offline
Newbie

Joined: Wed Nov 14, 2007 12:38 am
Posts: 4
Using Version 07.10.25

When I audit a Windows server which has two network cards, each with it's own IP address, the 2nd network card shows the IP address with the letter "N" as the first digit.

Here is part of our Hardware report for a system like this (notice the IP address of the 2nd network card - the "N" should be a "1")

Type: Ethernet 802.3
Description: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client)
Manufacturer: Broadcom Corporation
MAC Address: 00:18:8B:30:77:51
IP: 143.199.080.242
Subnet: 255.255.252.0
Gateway: 143.199.80.1
Primary DNS: 143.199.10.249
Secondary DNS: 143.199.10.250
Primary WINS: 143.199.83.249
Secondary WINS: 143.199.83.250
DHCP: True
DHCP Server: Yes / 143.199.83.249

Type: Ethernet 802.3
Description: Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) #2
Manufacturer: Broadcom Corporation
MAC Address: 00:18:8B:30:77:53
IP: N43.199.081.080
Subnet: 255.255.252.0
Gateway: 143.199.80.1
Primary DNS: 143.199.10.249
Secondary DNS: 143.199.10.250
Primary WINS: 143.199.83.249
Secondary WINS: 143.199.83.250
DHCP: True
DHCP Server: Yes / 143.199.83.249

Please confirm and advise.

Thank you!!!


Top
 Profile  
Reply with quote  
 Post subject: Re: Dual NIC
PostPosted: Wed Nov 14, 2007 9:55 pm 
Offline
Open-AudIT Fellow

Joined: Thu May 17, 2007 5:47 pm
Posts: 568
Location: Italy
Actually I'm surprised that every NIC is audited... In my case, only 1 NIC is showed (either enabled or disabled, either with IP addresses on the same subnet or not). The only difference is that I use static IP addresses. What services are bound to those NICs?
Is anyone else in my same situation? Thanks

_________________
Edoardo


Top
 Profile  
Reply with quote  
 Post subject: Re: Dual NIC
PostPosted: Thu Nov 15, 2007 6:36 am 
Offline
Newbie

Joined: Wed Nov 14, 2007 12:38 am
Posts: 4
Well, every NIC is not discovered on most of my systems, but in this case, I just happen to notice the letter "N" at the beginning of the IP address.

Also, on some of our servers with only a single NIC, but with several IP addresses bound to it, only the first one is stored reported in Open-Audit.

I'll submit a feature request to have all bound IP addresses of each NIC collected and displayed.

Thanks,
Ron


Top
 Profile  
Reply with quote  
 Post subject: Re: Dual NIC
PostPosted: Mon Nov 19, 2007 11:17 pm 
Offline
Newbie

Joined: Sat Nov 17, 2007 12:25 am
Posts: 5
Location: Paris, France
[quote="ef"]Actually I'm surprised that every NIC is audited... In my case, only 1 NIC is showed (either enabled or disabled, either with IP addresses on the same subnet or not). The only difference is that I use static IP addresses. What services are bound to those NICs?
Is anyone else in my same situation? Thanks


I've got the same here.. my dual or quad NICs servers are reported with only 1 NIC...

Top
 Profile  
Reply with quote  
 Post subject: Re: Dual NIC
PostPosted: Tue Nov 20, 2007 8:52 pm 
Offline
Moderator
User avatar

Joined: Tue Jan 25, 2005 3:09 am
Posts: 2140
Location: Scotland
... and even stranger....[attachment=0] NIC.png
NIC.png [ 24.94 KiB | Viewed 4054 times ]


Note the IP address ! Note the Subnet !! Note the Primary and Secondary DNS... :| One is the IP address, the other is the same IP address, padded with zeros.

Seems we have a couple of issues with multiple NICs and multi homed single NICs :?

I think we need to treat the NICs and the IP bindings separately to get the correct results, for example a NIC can have multiple IP details, and a system can have multiple NICs, each with multiple IP addresses etc.

_________________
Andrew

[size=85]OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu
Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc
OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home)
LDAP: Active Directory[/size]


Top
 Profile  
Reply with quote  
 Post subject: Re: Dual NIC
PostPosted: Tue Nov 20, 2007 9:15 pm 
Offline
Open-AudIT Fellow

Joined: Thu May 17, 2007 5:47 pm
Posts: 568
Location: Italy
Andrew, I agree with you. But I don't have your same issues on multihomed systems (neither quad NIC systems, nor NLB hosts with 2 IP per NIC, nor cluster nodes with a dual IP NIC and a heartbeat NIC), always only one NIC is reported with only one TCP/IP configuration. But I didn't check what audit.vbs detects, so I don't know if it's a scanning or a parsing problem.

_________________
Edoardo


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 6 posts ] 

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group