Scanning mixed networks (Mixed with PCs/Macs/Unixes)
  • ken-jiken-ji November 2010

    We'd like to request that NIA support the following function [prioritization of detection schemes]
    Because in the current version this is what we encounter.
    * We start a scan on an IP
    * it detects the IP is alive.
    * if it looks like it has windows networking (SMB-ish), proceeds to interrogate WMI (Windows server)
    * if it looks like it has SMPD, proceeds to interrogate SMPD (as if it was a router or the like)
    * finally it checks SSH and tries to login (probably a Linux or Mac)

    But I think this default heuristics can be augmented by:
    * forcing any or all of the detection schemes...
    * running any or all of the detections schemes anyway...
    * selecting the order of detection schemes...
    * running custom linux scripts (in case of SSH)...

    Because a fileserver running the openfiler distro returns this information.
    IP: XXX.XXX.XXX.XXX
    Device name: YYYY
    Description: Linux YYYY 2.6.26.8-1.0.11.smp.pae.gcc3.4.x86.i686 #1 SMP Sun Jan 11 00:57:28 GMT 2009 i686
    Contact: Root (configure /etc/snmp/snmp.local.conf)
    Location: Unknown (edit /etc/snmp/snmpd.conf)
    Object ID: iso.3.6.1.4.1.8072.3.2.10
    Uptime: 2:3:7:20 (d:h:m:s)

    This is a Linux machine with SMB-ish (no WMI though), SMPD (which is what gets used), and SSH (for administrative logins)

  • jeffjeff November 2010

    Hi ken-ji!

    Your idea might be quite interesting, but we just don't see any other advantages of this except for some potential improvements in scanning speed. If the node responds to WMI request, it'll be scanned as a Windows system. If SSH is not responding or is disabled at the scanning side, Network Inventory Advisor will move on to SNMP. But what exactly do you need to accomplish that you cannot do now?

    Jeff, project designer
    Network Inventory Software

  • ken-jiken-ji November 2010

    Because it's very slow and doesn't seem to work when the Linux server has Samba.
    The scan insists on attempting to login via SMB, which works and fails to get WMI data.
    the scan then stops there. (We setup samba to allow root to login as well)

    Plus its better to try SSH first before everything else since almost all windows machines do not have SSH, but almost all Linux machines have SSH

  • jeffjeff November 2010

    Let me talk to my developers to find out what they think about this.

    Jeff, project designer
    Network Inventory Software

  • jeffjeff November 2010

    An update from our developers: we could surely use SSH scanning as the first method, but that should only provide you with the better speed of scanning on non-Windows networks and only the first time you scan them, as later on every node is scanned by the method that relates to its type. Still trying to see the exact win-win algorithm here...

    Jeff, project designer
    Network Inventory Software

  • ken-jiken-ji November 2010

    How about this.
    we should make the order user configurable - so that if they know the mix on the network, they can tune the performance. ie. if a subnet has only windows PCs we can tell the scan to work with WMI only. if Linux only, then maybe just SSH.

    I'm thinking from a background where the admin does not have a clear idea of what the OS are there in any subnet.

    Also, since we have a huge variety of linux distros installed, it would be nice if we could make the ssh scan run a configurable script so we can extract whatever info we want as long we know how to find what we want - probably this is applicable to Windows and Mac scanning too.

    Finally you mentioned the node gets scanned by the method that relates to its type. this is a problem if we can't be smarter than software to tell it what the type is supposed to be ie we currently have problems when it is decided that a Linux PC is a windows PC or a snmp device.

    I hope this makes my position clear.

  • jeffjeff November 2010

    ken-ji said: we should make the order user configurable - so that if they know the mix on the network, they can tune the performance. ie. if a subnet has only windows PCs we can tell the scan to work with WMI only. if Linux only, then maybe just SSH.

    This is what we are thinking about right now: let you specify which IP addresses should be scanned using specific method. Probably this will become available in the scanning wizard when adding IP ranges.

    ken-ji said: since we have a huge variety of linux distros installed, it would be nice if we could make the ssh scan run a configurable script so we can extract whatever info we want as long we know how to find what we want - probably this is applicable to Windows and Mac scanning too.

    That's also a potential feature for future updates. I'll keep you posted on this.

    ken-ji said: Finally you mentioned the node gets scanned by the method that relates to its type. this is a problem if we can't be smarter than software to tell it what the type is supposed to be ie we currently have problems when it is decided that a Linux PC is a windows PC or a snmp device.

    This only happens after a successful initial scan.
    Jeff, project designer
    Network Inventory Software

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Apply for Membership

Categories

In this Discussion

Tagged

Network Inventory Software
PC Inventory Software