Registrations to Open-AudIT forums are now closed. To ask any new questions please visit Opmantek Community Questions.

Open-AudIT

What's on your network?
It is currently Fri Mar 29, 2024 10:46 am

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 2 posts ] 
Author Message
PostPosted: Fri Jan 15, 2010 12:57 am 
Offline
Helper

Joined: Thu Jun 14, 2007 4:06 am
Posts: 96
Location: Georgia, USA
I use the MAC address as the system UUID. This is causing a problem on one particular Windows Server 2008 system. It's using the "Microsoft Tun Miniport Adapter" mac address as the system_uuid. The MAC address is 02:00:54:55:4E:01. It is on multiple systems. You can Google it and see that it is not unique:

[url]http://www.google.com/search?hl=en&source=hp&q=02%3A00%3A54%3A55%3A4E%3A01&btnG=Google+Search&aq=f&oq=&aqi=[/url]

There are several other "virtual" type adaptors ending up in the database as well. Here they are with the associated MAC addresses.

tunmp 02:00:54:55:4E:01
tunnel unknown
VPCNetS2 unknown
RasSstp unknown

These are from a Vista SP2 system.

I have modified audit.vbs to skip the adaptors that reference these services. Here is the section of code that queries WMI for the network cards. The modifications are included. The section is at about line 700.

[code]Set colItems = objWMIService.ExecQuery("Select * from Win32_NetworkAdapterConfiguration " _
& "WHERE ServiceName<>'' AND ServiceName<>'AsyncMac' " _
& "AND ServiceName<>'VMnetx' AND ServiceName<>'VMnetadapter' " _
& "AND ServiceName<>'Rasl2tp' AND ServiceName<>'msloop' " _
& "AND ServiceName<>'PptpMiniport' AND ServiceName<>'Raspti' " _
& "AND ServiceName<>'NDISWan' AND ServiceName<>'NdisWan4' AND ServiceName<>'RasPppoe' " _
& "AND ServiceName<>'tunmp' AND ServiceName<>'tunnel' AND ServiceName<>'VPCNetS2' " _
& "AND ServiceName<>'RasSstp' AND ServiceName<>'NdisIP' AND Description<>'PPP Adapter.'",,48)[/code]


Top
 Profile  
Reply with quote  
PostPosted: Tue Jan 19, 2010 8:17 pm 
Offline
Open-AudIT Fellow

Joined: Thu May 17, 2007 5:47 pm
Posts: 568
Location: Italy
Fixed at SVN rev. 1231. Thanks

_________________
Edoardo


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 2 posts ] 

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group