Registrations to Open-AudIT forums are now closed. To ask any new questions please visit Opmantek Community Questions.

Open-AudIT

What's on your network?
It is currently Fri Mar 29, 2024 1:44 am

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 33 posts ]  Go to page Previous  1, 2, 3  Next
Author Message
 Post subject:
PostPosted: Fri Aug 25, 2006 3:23 am 
No seriously, that page does not exist!! If you're up to date like you say you are, you shouldn't be seeing that link! I'm confused.


Top
  
Reply with quote  
 Post subject:
PostPosted: Fri Aug 25, 2006 3:40 am 
Offline
Newbie

Joined: Thu Aug 24, 2006 11:48 pm
Posts: 16
Location: Florida - USA
ok, I will download it again. I promise I downloaded it yesterday afternoon.

I'll let you know how it works


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Fri Aug 25, 2006 3:44 am 
Offline
Newbie

Joined: Thu Aug 24, 2006 11:48 pm
Posts: 16
Location: Florida - USA
just to make sure I am getting the correct download is this the source

[url]http://sourceforge.net/project/showfiles.php?group_id=160594[/url]


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Fri Aug 25, 2006 3:49 am 
Well.... that's the latest released version. But it's old already! Until we get the latest version completely bug-free, there won't be another released zip file. The way people hae been getting the latest code is using our [url=http://sourceforge.net/svn/?group_id=160594]subversion server[/url].


Top
  
Reply with quote  
 Post subject:
PostPosted: Fri Aug 25, 2006 5:35 am 
Offline
Newbie

Joined: Thu Aug 24, 2006 11:48 pm
Posts: 16
Location: Florida - USA
ok, I have loaded the latest source and I am still having the same issue.

I ran the audit on three computers:

2 shuttles and then my workstation.

my computer has the network information. The shuttles do not have any network information.

If I run it with audit.config online ='p' it pulls all the information just fine.


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Fri Aug 25, 2006 5:39 am 
But the menus have now changed, right? So you don't see that mysterious one under OS Settings?


Top
  
Reply with quote  
 Post subject:
PostPosted: Fri Aug 25, 2006 5:43 am 
Offline
Newbie

Joined: Thu Aug 24, 2006 11:48 pm
Posts: 16
Location: Florida - USA
yes :) sorry about that

I have tried it as online = 'yesxml' online = 'ie' online = 'n' and none of these will pull the network information off of the shuttle

only when I use online = 'p' will it get the information


thanks again for helping me on this matter.


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Fri Aug 25, 2006 5:45 am 
Hmm, I'm stumped for the moment.


Top
  
Reply with quote  
 Post subject:
PostPosted: Fri Aug 25, 2006 6:01 am 
Offline
Moderator

Joined: Sat Mar 04, 2006 2:44 am
Posts: 193
Karaki, please could you use the following options in audit.config

online = "ie"
ie_visible = "y"
ie_auto_submit = "n"
ie_submit_verbose = "y"

Run the audit on the shuttle.

After clicking submit on the ie page, Look at the network sections and post the results here.


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Fri Aug 25, 2006 6:57 am 
Offline
Newbie

Joined: Thu Aug 24, 2006 11:48 pm
Posts: 16
Location: Florida - USA
d.l.dave,

I ran it with the config settings like you asked and nothing is listed for the shuttles.

my computer : I put 999 in some of the data for security

network^^^9999999^^^Intel(R) PRO/100 VE Network Connection - Packet Scheduler Miniport^^^True^^^999999^^^karaki^^^99999^^^999999^^^255.255.255.0^^^^^^^^^Ethernet 802.3^^^Microsoft^^^
system01^^^999999^^^raydon.com^^^RAYDON\karaki^^^Default-First-Site-Name^^^999999^^^RD-DC-0^^^

The shuttles get this: it starts at system01

system01^^^192.168.075.008^^^VCOT^^^^^^^^^^^^^^^
audit^^^SDTPC^^^20060824165247^^^75FB9712-FFFF-FFFF-FFFF-FFFFFFFFFFFF^^^karaki^^^y^^^y^^^
system02^^^SB71^^^SDTPC^^^2^^^False^^^HMMWV^^^Desktop^^^2047^^^


I hope this helps


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Fri Aug 25, 2006 7:27 am 
Offline
Moderator

Joined: Sat Mar 04, 2006 2:44 am
Posts: 193
Ok cheers.

Seems like the network info isn't getting picked up.

Create a new script called test.vbs (or whatever) containing

[code]strComputer = "."

Set wmiLocator = CreateObject("WbemScripting.SWbemLocator")
Set objWMIService = wmiLocator.ConnectServer(strComputer, "root\cimv2")

'''''''''''''''''''''''''''
' Network Information '
'''''''''''''''''''''''''''
comment = "Network Info"
if verbose = "y" then
wscript.echo comment
end if

Set colItems = objWMIService.ExecQuery("select * from win32_networkadapterconfiguration WHERE IPEnabled='TRUE' " _
& "AND ServiceName<>'AsyncMac' AND ServiceName<>'VMnetx' " _
& "AND ServiceName<>'VMnetadapter' AND ServiceName<>'Rasl2tp' " _
& "AND ServiceName<>'msloop' " _
& "AND ServiceName<>'PptpMiniport' AND ServiceName<>'Raspti' " _
& "AND ServiceName<>'NDISWan' AND ServiceName<>'NdisWan4' AND ServiceName<>'RasPppoe' " _
& "AND ServiceName<>'NdisIP' AND ServiceName<>'' AND Description<>'PPP Adapter.'",,48)
For Each objItem in colItems
net_ip = objItem.IPAddress(0)
net_mac = objItem.MACAddress
net_description = objItem.Description
net_dhcp_enabled = objItem.DHCPEnabled
net_dhcp_server = objItem.DHCPServer
net_dns_host_name = objItem.DNSHostName
net_dns_server = objItem.DNSServerSearchOrder(0)
net_dns_server_2 = objItem.DNSServerSearchOrder(1)
net_ip_subnet = objItem.IPSubnet(0)
net_wins_primary = objItem.WINSPrimaryServer
net_wins_secondary = objItem.WINSSecondaryServer
Set colItems2 = objWMIService.ExecQuery("Select * from Win32_NetworkAdapter WHERE MACAddress='" & objItem.MACAddress & "'",,48)
For Each objItem2 in colItems2
net_adapter_type = objItem2.AdapterType
net_manufacturer = objItem2.Manufacturer
Next
' Below is to account for a NULL in various items
if net_ip = "" then net_ip = "0.0.0.0"
if isnull(net_dns_server_2) then net_dns_server_2 = "none"
if isnull(net_dhcp_server) then net_dhcp_server = "none"
if net_dhcp_server = "" then net_dhcp_server = "none"
if isnull(net_dns_server) then net_dns_server = "none"
if isnull(net_ip_subnet) then net_ip_subnet = "none"
net_description = clean(net_description)
' IP Address padded with zeros so it sorts properly
MyIP = Split(net_ip, ".", -1, 1)
if MyIP(0) <> "169" AND MyIP(1) <> "254" then
MyIP(0) = right("000" & MyIP(0),3)
MyIP(1) = right("000" & MyIP(1),3)
MyIP(2) = right("000" & MyIP(2),3)
MyIP(3) = right("000" & MyIP(3),3)
net_ip = MyIP(0) & "." & MyIP(1) & "." & MyIP(2) & "." & MyIP(3)
if net_ip <> "000.000.000.000" then net_ip_address = net_ip end if
end if
if net_dhcp_server <> "255.255.255.255" then
form_input = "network^^^" & net_mac & "^^^" & net_description & "^^^" & net_dhcp_enabled _
& "^^^" & net_dhcp_server & "^^^" & net_dns_host_name & "^^^" & net_dns_server _
& "^^^" & net_ip & "^^^" & net_ip_subnet & "^^^" & net_wins_primary _
& "^^^" & net_wins_secondary & "^^^" & net_adapter_type & "^^^" & net_manufacturer & "^^^"
entry form_input,comment,objTextFile,oAdd,oComment
form_input = ""
if net_mac_uuid = "" then net_mac_uuid = net_mac end if
end if
Next

sub entry(form_input, comment,objTextFile,oAdd,oComment)
WScript.echo form_input
end sub


function clean(value)
if isnull(value) then value = ""
'value = Replace(value, chr(34), "\'")
'value = Replace(value, chr(39), "\'")
value = Replace(value, vbCr, "")
value = Replace(value, vbLf, "")
'if right(value, 1) = "\" then
' value = value + " "
'end if
clean = value
end function[/code]

And run it on the shuttle computer. Let me know how it crashes out, which i'm hoping it will!


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Sat Aug 26, 2006 4:09 am 
Offline
Newbie

Joined: Thu Aug 24, 2006 11:48 pm
Posts: 16
Location: Florida - USA
Sorry it took so long to get back on this.

after running the script above I go an error message of:

Script: \\karaki\scripts\audit_test.vbs
Line: 57
Char: 6
Error: Type mismatch: 'net_dns_server'
Code: 800A000D
Source: Microsoft VBScript runtime error


Thanks


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Sat Aug 26, 2006 4:52 am 
Offline
Moderator

Joined: Sun Aug 06, 2006 1:13 am
Posts: 362
Location: Germany
I had another Idea:

Could you please run these programs from windows-shell and look for network information?

msinfo32.exe
systeminfo.exe


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Sat Aug 26, 2006 5:47 am 
Offline
Newbie

Joined: Thu Aug 24, 2006 11:48 pm
Posts: 16
Location: Florida - USA
After running systeminfo.exe I was able to get the Network information but the audit when running anything but 'p' will not pick up the network information on shuttles

[quote]Host Name: SDTPC
OS Name: Microsoft Windows XP Professional
OS Version: 5.1.2600 Service Pack 2 Build 2600
OS Manufacturer: Microsoft Corporation
OS Configuration: Standalone Workstation
OS Build Type: Multiprocessor Free
Registered Owner: HMMWV
Registered Organization: Raydon
Product ID: 76487-641-1890406-23325
Original Install Date: 12/30/2005, 2:05:28 PM
System Up Time: 0 Days, 4 Hours, 23 Minutes, 9 Seconds
System Manufacturer: XPC___
System Model: SB71
System type: X86-based PC
Processor(s): 2 Processor(s) Installed.
[01]: x86 Family 15 Model 3 Stepping 4 GenuineIntel ~
3207 Mhz
[02]: x86 Family 15 Model 3 Stepping 4 GenuineIntel ~
3207 Mhz
BIOS Version: XPC - 42302e31
Windows Directory: C:\WINDOWS
System Directory: C:\WINDOWS\system32
Boot Device: \Device\HarddiskVolume1
System Locale: en-us;English (United States)
Input Locale: N/A
Time Zone: (GMT-05:00) Eastern Time (US & Canada)
Total Physical Memory: 2,047 MB
Available Physical Memory: 1,713 MB
Virtual Memory: Max Size: 2,048 MB
Virtual Memory: Available: 2,008 MB
Virtual Memory: In Use: 40 MB
Page File Location(s): C:\pagefile.sys
Domain: VCOT
Logon Server: \\SDTPC
Hotfix(s): 1 Hotfix(s) Installed.
[01]: Q147222
NetWork Card(s): 2 NIC(s) Installed.
[01]: Broadcom NetXtreme Gigabit Ethernet
Connection Name: DIS Net
DHCP Enabled: No
IP address(es)
[01]: 192.168.75.8
[02]: 1394 Net Adapter
Connection Name: 1394 Connection
DHCP Enabled: Yes
DHCP Server: N/A
IP address(es)


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Tue Aug 29, 2006 6:48 am 
Offline
Moderator

Joined: Sat Mar 04, 2006 2:44 am
Posts: 193
Okay. Think I've found the problem

In audit.vbs find the Network Information section.

Where it says:

[code]
net_dns_server = objItem.DNSServerSearchOrder(0)
net_dns_server_2 = objItem.DNSServerSearchOrder(1)
[/code]

replace with

[code]
if isarray(objItem.DNSServerSearchOrder) then
net_dns_server = objItem.DNSServerSearchOrder(0)
net_dns_server_2 = objItem.DNSServerSearchOrder(1)
end if
[/code]

Now try running on the shuttle again. Let me know if it works and I'll check the code into the trunk.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 33 posts ]  Go to page Previous  1, 2, 3  Next

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Group