Open-AudIT
https://www.open-audit.org/phpBB3/

auditing a box with several ip aadresses may fail
https://www.open-audit.org/phpBB3/viewtopic.php?f=8&t=2374
Page 1 of 1

Author:  kilgor [ Tue Sep 25, 2007 2:05 am ]
Post subject:  auditing a box with several ip aadresses may fail

Hi,

I got a box which is running fine. Audit completes the run OK under the condition I have commented out the "Double check WMI is working" code. It gets all the software, network, hardware etc info OK.

So:

[code]((UCase(strComputer) <> system_name) AND (strComputer <> ".") AND (strComputer <> full_system_name) AND (strComputer <> ns_ip) AND (strComputer <> system_ip))[/code]

The problematic part is the last check: system_ip. The box in question has vmware installed and has virtual nics, so strComputer (the ip i used to connect to the box) and system_ip do not match and that makes all of the tests succeed and the audit fails. One of the vmware nics happens to be the first one to be listed.

I guess the solution would be to go through all the the possible system_ip's and see if any of those matches. Anyhow, this situation would be similar with a box with several real nics too.

Page 1 of 1 All times are UTC + 10 hours
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/