Open-AudIT
https://www.open-audit.org/phpBB3/

admin_nmap_input.php not importing all nmap scans.
https://www.open-audit.org/phpBB3/viewtopic.php?f=8&t=4000
Page 1 of 1

Author:  WSMIT [ Sat Jan 15, 2011 2:16 am ]
Post subject:  admin_nmap_input.php not importing all nmap scans.

I can run nmap from both linux and windows, and it captures and inputs all the nmap scans when I scan my local non routed network. When I try to scan a routed network, (ie. I'm on 10.140.32.0/24, and I try to scan 10.140.33.0/24) it doesn't get the things it finds entered into the database.

I've tracked it done to nmap finding the right things, and I had it leave the ie screen open, and it seems that admin_nmap_input.php parses it okay, but it never shows up in the open-audit database.

this is the output on the webpage when it tries to input the data:
[code]NMap

IP Address: 010.140.033.118
Name: 010.140.033.118
Device Type: VoIP phone
Running: Cisco embedded
SELECT net_uuid FROM network_card WHERE net_ip_address = '010.140.033.118'
SELECT other_id FROM other WHERE other_ip_address = '010.140.033.118'
[/code]

Author:  jpa [ Sat Jan 15, 2011 10:05 am ]
Post subject:  Re: admin_nmap_input.php not importing all nmap scans.

It's probably some logic problems caused by a missing MAC address because you're scanning outside the local subnet. I think I looked at the same problem someone posted earlier but never got around to tracking down a fix. Maybe I'll try again.

From a quick look it seems nmap works best when auditing the local subnet. You should probably just run the nmap audit from a computer located in the subnet you're trying to scan. I looked at output from nmap on Windows against a remote subnet located Windows box and the output is missing a lot of information.

Page 1 of 1 All times are UTC + 10 hours
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/