Registrations to Open-AudIT forums are now closed. To ask any new questions please visit Opmantek Community Questions.

Open-AudIT

What's on your network?
It is currently Fri Mar 29, 2024 7:37 am

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 12 posts ] 
Author Message
PostPosted: Fri Jul 28, 2006 7:51 pm 
Offline
Newbie

Joined: Fri Jan 20, 2006 11:58 pm
Posts: 11
When I scan PC with WinXP, audit finds:
Verbose:
User: Administrator
Verbose: y
System: OJ-WXP-WS0XX
UUID: 4C4C4544-0054-5710-8059-B9C04FAA314A
Timestamp: 20060728114333
Software Audit: y
etc (...from admin_pc_add_2.php)

But in the list of scanned systems, there is only IP address and no System (name), so I can't open it for more data.
It's the same for all machines with XP. W2K looks ok.

What can be wrong?

I have WXP,IIS5.x,PHP5.X, MySQL5.*

Marko


Top
 Profile  
Reply with quote  
 Post subject: There is still a problem
PostPosted: Mon Jul 31, 2006 5:32 pm 
Offline
Newbie

Joined: Fri Jan 20, 2006 11:58 pm
Posts: 11
I found out, that when I scan WinXP machine admin_pc_add_2.php returns only a few datas (network and system). Win2k returns bios, processor, memory,... too.
What could be wrong?


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Mon Jul 31, 2006 8:22 pm 
Offline
Site Admin
User avatar

Joined: Mon Jun 07, 2004 11:48 am
Posts: 1964
Location: Brisbane, Australia
Is XP fully patched ?


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Mon Jul 31, 2006 9:25 pm 
Offline
Newbie

Joined: Fri Jan 20, 2006 11:58 pm
Posts: 11
Yes, it is.


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Mon Jul 31, 2006 11:52 pm 
Try online = "n" in your audit.config, and check the output file to see what it finds.


Top
  
Reply with quote  
 Post subject:
PostPosted: Mon Jul 31, 2006 11:57 pm 
Offline
Newbie

Joined: Fri Jan 20, 2006 11:58 pm
Posts: 11
I tried. It is OK. All data is in.


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Tue Aug 01, 2006 12:05 am 
Does this mean your problem is solved, or just that the info shows up in the text file?


Top
  
Reply with quote  
 Post subject: Not solved
PostPosted: Tue Aug 01, 2006 3:58 pm 
Offline
Newbie

Joined: Fri Jan 20, 2006 11:58 pm
Posts: 11
No, It's not solved.
With online = "n" - all data in the file
With online = "p" - all data on the screen
With online = "ie" - on the screen I see only Network and System (admin_pc_add_2.php)

On the list of discovered machines there is only IP address - whatever I do in admin.config. System name is bland an there is no clipart for PC. This happens only with WinXP. W2K is OK.



btw: which program do you suggest to look into database directly?


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Tue Aug 01, 2006 11:00 pm 
Offline
Newbie

Joined: Fri Jan 20, 2006 11:58 pm
Posts: 11
I stopped IIS and started Apache (WAMP5).

Now I can't audit any PC.
online = "ie" ... returns empty page (only the name odf the fields and empty query:
Verbose:
User:
Verbose: y
System:
UUID:
Timestamp:
Software Audit:

SELECT MAX(system_audits_timestamp) AS timestamp FROM system_audits WHERE system_audits_uuid = ''
INSERT INTO system_audits (system_audits_uuid, system_audits_timestamp, system_audits_username) VALUES ('','','')
INSERT INTO system (system_uuid, system_first_timestamp) VALUES ('','')
UPDATE system SET system_timestamp = '' WHERE system_uuid = ''
Close

Page was generated in 0.01 seconds !

online = "p" ... returns full data
Open Audit

Network Information
System Name: OJ-W2K-WS029
Description:
MAC Address: 00:0D:56:14:BD:A1
IP Address: 192.168.083.084
Subnet: 255.255.255.0
DHCP Enabled: Neresnično
DHCP Server: none
WINS Server: 127.0.0.0
DNS Server: 172.30.1.254
NIC Manufacturer: Intel
Description: Intel(R) PRO/1000 MT Network Connection
Part of Domain:
Domain Role: Standalone Workstation
Domain: WORKGROUP
Domain Site Name:
Domain Controller Address:
Domain Controller Name:

System Information
User Name:
Date Audited: 1.8.2006

...etc

But in database only 'Not-networked' data.
Any idea?


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Tue Aug 01, 2006 11:41 pm 
Offline
Moderator
User avatar

Joined: Tue Jan 25, 2005 3:09 am
Posts: 2140
Location: Scotland
Try eliminating IE altogether (you may need to get the latest CVS)

in audit.config use something like

[code]
audit_location = "r"
verbose = "n"
online = "yesxml"
strComputer = ""
ie_visible = "n"
ie_auto_submit = "y"
ie_submit_verbose = "n"
[/code]

online = "yesxml" will submit the data directly without interacting with IE. (Work well for me, I have just aidited 77 machines in <10 mins)


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Tue Aug 01, 2006 11:46 pm 
I suggest that you get the latest code, and give that a try: [url]http://sourceforge.net/svn/?group_id=160594[/url]. And then follow A_Hull's advice.


Top
  
Reply with quote  
 Post subject:
PostPosted: Wed Aug 02, 2006 5:57 pm 
Offline
Newbie

Joined: Fri Jan 20, 2006 11:58 pm
Posts: 11
Solved.
I like this SVN :P
and Tortoise 8)

Thank you.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 12 posts ] 

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group