Open-AudIT
https://www.open-audit.org/phpBB3/

WinXP - empty System name
https://www.open-audit.org/phpBB3/viewtopic.php?f=10&t=1123
Page 1 of 1

Author:  markog [ Fri Jul 28, 2006 7:51 pm ]
Post subject:  WinXP - empty System name

When I scan PC with WinXP, audit finds:
Verbose:
User: Administrator
Verbose: y
System: OJ-WXP-WS0XX
UUID: 4C4C4544-0054-5710-8059-B9C04FAA314A
Timestamp: 20060728114333
Software Audit: y
etc (...from admin_pc_add_2.php)

But in the list of scanned systems, there is only IP address and no System (name), so I can't open it for more data.
It's the same for all machines with XP. W2K looks ok.

What can be wrong?

I have WXP,IIS5.x,PHP5.X, MySQL5.*

Marko

Author:  markog [ Mon Jul 31, 2006 5:32 pm ]
Post subject:  There is still a problem

I found out, that when I scan WinXP machine admin_pc_add_2.php returns only a few datas (network and system). Win2k returns bios, processor, memory,... too.
What could be wrong?

Author:  Mark [ Mon Jul 31, 2006 8:22 pm ]
Post subject: 

Is XP fully patched ?

Author:  markog [ Mon Jul 31, 2006 9:25 pm ]
Post subject: 

Yes, it is.

Author:  mikeyrb [ Mon Jul 31, 2006 11:52 pm ]
Post subject: 

Try online = "n" in your audit.config, and check the output file to see what it finds.

Author:  markog [ Mon Jul 31, 2006 11:57 pm ]
Post subject: 

I tried. It is OK. All data is in.

Author:  mikeyrb [ Tue Aug 01, 2006 12:05 am ]
Post subject: 

Does this mean your problem is solved, or just that the info shows up in the text file?

Author:  markog [ Tue Aug 01, 2006 3:58 pm ]
Post subject:  Not solved

No, It's not solved.
With online = "n" - all data in the file
With online = "p" - all data on the screen
With online = "ie" - on the screen I see only Network and System (admin_pc_add_2.php)

On the list of discovered machines there is only IP address - whatever I do in admin.config. System name is bland an there is no clipart for PC. This happens only with WinXP. W2K is OK.



btw: which program do you suggest to look into database directly?

Author:  markog [ Tue Aug 01, 2006 11:00 pm ]
Post subject: 

I stopped IIS and started Apache (WAMP5).

Now I can't audit any PC.
online = "ie" ... returns empty page (only the name odf the fields and empty query:
Verbose:
User:
Verbose: y
System:
UUID:
Timestamp:
Software Audit:

SELECT MAX(system_audits_timestamp) AS timestamp FROM system_audits WHERE system_audits_uuid = ''
INSERT INTO system_audits (system_audits_uuid, system_audits_timestamp, system_audits_username) VALUES ('','','')
INSERT INTO system (system_uuid, system_first_timestamp) VALUES ('','')
UPDATE system SET system_timestamp = '' WHERE system_uuid = ''
Close

Page was generated in 0.01 seconds !

online = "p" ... returns full data
Open Audit

Network Information
System Name: OJ-W2K-WS029
Description:
MAC Address: 00:0D:56:14:BD:A1
IP Address: 192.168.083.084
Subnet: 255.255.255.0
DHCP Enabled: Neresnično
DHCP Server: none
WINS Server: 127.0.0.0
DNS Server: 172.30.1.254
NIC Manufacturer: Intel
Description: Intel(R) PRO/1000 MT Network Connection
Part of Domain:
Domain Role: Standalone Workstation
Domain: WORKGROUP
Domain Site Name:
Domain Controller Address:
Domain Controller Name:

System Information
User Name:
Date Audited: 1.8.2006

...etc

But in database only 'Not-networked' data.
Any idea?

Author:  A_Hull [ Tue Aug 01, 2006 11:41 pm ]
Post subject: 

Try eliminating IE altogether (you may need to get the latest CVS)

in audit.config use something like

Code:
audit_location = "r"
verbose = "n"
online = "yesxml"
strComputer = ""
ie_visible = "n"
ie_auto_submit = "y"
ie_submit_verbose = "n"


online = "yesxml" will submit the data directly without interacting with IE. (Work well for me, I have just aidited 77 machines in <10 mins)

Author:  mikeyrb [ Tue Aug 01, 2006 11:46 pm ]
Post subject: 

I suggest that you get the latest code, and give that a try: http://sourceforge.net/svn/?group_id=160594. And then follow A_Hull's advice.

Author:  markog [ Wed Aug 02, 2006 5:57 pm ]
Post subject: 

Solved.
I like this SVN :P
and Tortoise 8)

Thank you.

Page 1 of 1 All times are UTC + 10 hours
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/