Open-AudIT

Hi there,
I have a problem with Open Audit's audit.vbs (surprise ).
If I run the "CSCRIPT AUDIT.VBS" - command, all I get is :

File rechner.txt read into array.
Number of systems retrieved from file: 0
--------------
0 of 0
Processes running: 1
Next System: eub1
--------------
Waiting 1 min for remaining 1 scripts to complete.

The only entry of rechner.txt ist "eub1,," . No empty lines at the end of the file or something like that.
If I enter the name of the computer with open audit installed, the audit works.
I did some experiments with nmap.vbs and it worked. The computer was found (by IP, of course) and some information about the OS were gathered, so I figuered, it can't be a network-based problem. The only problem that occured was that no system-name was gathered and the ip-entry for the system was 000.000.000.000. But at least there was a connection.
Both systems are in the same subnet, even in the same workgroup.
No domain used, as there is none.

Contents of my audit.config:

'
' Standard audit section
'
audit_location = "r"
verbose = "y"
audit_host="http://127.0.0.1"
online = "yesxml"
strComputer = ""
ie_visible = "n"
ie_auto_submit = "y"
ie_submit_verbose = "y"
ie_form_page = "http://127.0.0.1/admin_pc_add_1.php"
non_ie_page = "http://127.0.0.1/admin_pc_add_1.php"
input_file = "rechner.txt"

'
' Email authentication
'
'

email_to = "example@example.com"
email_from = "example@example.com"
'email_sender = "Open-AudIT"
email_server = "mail.example.com" ' IP address or FQDN
email_port = "25" ' The SMTP port
email_auth = "1" ' 0 = Anonymous, 1 = Clear-text Authentication, 2 = NTLM
email_user_id = "example@example.com" ' A valid Email account in user@domain format
email_user_pwd = "some_password" ' The SMTP email password
email_use_ssl = "false" ' True/False
email_timeout = "60" ' In seconds
send_email = "false" ' True/False - Enable/Disable email sending

audit_local_domain = "n"
'
' Set domain_type = 'nt' for NT4 or SAMBA otherwise leave blank or set to ldap
'domain_type = "nt"

local_domain = "LDAP://example.local"

'
' Example Set Domain name for NT ONLY for LDAP use the above format
' NOTE This is Case Sensetive. See the example below.
'
'local_domain = "WinNT://IEXPLORE"
'local_domain = "WinNT://<domainname>"
'

hfnet = "n"
Count = 0
number_of_audits = 20
script_name = "audit.vbs"
monitor_detect = "y"
printer_detect = "y"
software_audit = "y"
uuid_type = "uuid"
'
' Nmap section
'
nmap_tmp_cleanup = true ' Set this false if you want to leave the tmp files for analysis in your tmp folder
nmap_subnet = "10.132.155." ' The subnet you wish to scan
nmap_subnet_formatted = "10.132.155." ' The subnet padded with 0's
nmap_ie_form_page = "127.0.0.1/admin_nmap_input.php"
nmap_ie_visible = "y"
nmap_ie_auto_close = "n"
nmap_ip_start = 49
nmap_ip_end = 49
nmap_syn_scan = "y" ' Tcp Syn scan
nmap_udp_scan = "y" ' UDP scan
nmap_srv_ver_scan = "y" ' Service version detection.
nmap_srv_ver_int = 0 ' Service version detection intensity level. Values 0-9, 0=fast

Ip-Range is 1 to shorten the test.

Thanks in advance! =)

As there is no Windows domain, I would try entering an appropriate username and password in your pc list file, to give the script some credentials to connect to that remote computer you want to audit.

_________________
Edoardo

After SVN 1245, my audit.vbs file errors out.

Windows Scipt Host
Line: 3387
Char: 1
Error: Expected Statement
Code: 800A0400
Source: Microsoft VBScript compilation error

Works for me. Make sure you don't have any modifications to the audit.vbs. Also check that you don't have any errors in your audit.config file. You could post your audit.config file here (with any passwords removed) for review.