| Open-AudIT https://www.open-audit.org/phpBB3/ |
|
| Nmap.. Dual Entries? https://www.open-audit.org/phpBB3/viewtopic.php?f=5&t=2598 |
Page 1 of 1 |
| Author: | bread555 [ Fri Feb 01, 2008 9:10 am ] |
| Post subject: | Nmap.. Dual Entries? |
Last time I did the NMAP scan, it showed dual entries in my open audit. I had one scan that trawled the AD, and then this one that went to find anything else... the NMAP one made double entries! (for IP addresses) although, this was several versions/months ago. Is this still the case? or can I now use the NMAP to find the hidden boxes and routers that linger on my network. Thanks guys! |
|
| Author: | ef [ Fri Feb 01, 2008 6:07 pm ] |
| Post subject: | Re: Nmap.. Dual Entries? |
Update to last SVN version, delete all networked other systems detected and try. From the end of october, both nmap_ports and network_card table were modified, along with nmap parameters used (to detect also udp ports and service versions, see FAQ for addition required on the audit.config file) and with the way its output is parsed/showed. |
|
| Author: | bread555 [ Sat Feb 02, 2008 2:24 am ] |
| Post subject: | Re: Nmap.. Dual Entries? |
Excuse me for being a wee bit thick this morning (coffee minons have not yet arrived) But I am still a little confused. If I run NMAP into my database, what will happen to existing entries when the NMAP results roll in? |
|
| Author: | ef [ Sat Feb 02, 2008 2:59 am ] |
| Post subject: | Re: Nmap.. Dual Entries? |
You shouldn't have issues: existing systems and "other" systems will be updated with detected ports and all new detected "other" systems in your scan range will be added to DB. |
|
| Page 1 of 1 | All times are UTC + 10 hours |
| Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |
|