1
0
-1

Hi all,

even if WMI is running fine and correctly detected (no errors in debug) systems are discovered by SNMP (after NMAP) only and no other information from WMI script.

No errors elsewhere.

Any suggestion? (latest release)

[0] => <devices>
    [1] =>  <device>
    [2] =>      <subnet_range><![CDATA[172.25.1.12]]></subnet_range>
    [3] =>      <man_ip_address><![CDATA[172.25.1.12]]></man_ip_address>
    [4] =>      <mac_address><![CDATA[2C:76:8A:54:3F:D4]]></mac_address>
    [5] =>      <manufacturer><![CDATA[Hewlett-Packard Company]]></manufacturer>
    [6] =>      <type><![CDATA[unknown]]></type>
    [7] =>      <os_group><![CDATA[Windows]]></os_group>
    [8] =>      <os_family><![CDATA[Windows 2008]]></os_family>
    [9] =>      <os_name><![CDATA[Microsoft Windows 2008|7|Phone|Vista]]></os_name>
    [10] =>      <description><![CDATA[general purpose|phone]]></description>
    [11] =>      <snmp_status><![CDATA[true]]></snmp_status>
    [12] =>      <ssh_status><![CDATA[false]]></ssh_status>
    [13] =>      <wmi_status><![CDATA[true]]></wmi_status>
    [14] =>      <p80_status><![CDATA[false]]></p80_status>
    [15] =>      <p443_status><![CDATA[false]]></p443_status>
    [16] =>      <tel_status><![CDATA[false]]></tel_status>
    [17] =>      <subnet_timestamp><![CDATA[2015-10-23 09:18:28]]></subnet_timestamp>
    [18] =>  </device>
    [19] =>  <device>
    [20] =>      <subnet_range><![CDATA[172.25.1.12]]></subnet_range>
    [21] =>      <subnet_timestamp><![CDATA[2015-10-23 09:18:28]]></subnet_timestamp>
    [22] =>      <complete>y</complete>
    [23] =>  </device>
    [24] => </devices>
    [25] => 

.

.

.

LOG   - Start processing 172.25.1.12
DEBUG - existing system key found for System ID: 1.
LOG   - WMI Status is true on 172.25.1.12
LOG   - SNMP Status is true on 172.25.1.12
LOG   - SSH Status is false on 172.25.1.12
LOG   - Attempting SNMP discovery on 172.25.1.12
LOG   - SNMPv2 testing passed credentials () for 172.25.1.12 (System ID 1)
LOG   - SNMPv2 using passed credentials not connected to 172.25.1.12 (System ID 1)
LOG   - SNMPv2 no specific credentials provided for 172.25.1.12 (System ID 1)
LOG   - SNMPv2 no supplied credentials provided for 172.25.1.12 (System ID 1)
LOG   - SNMPv2 no default credentials provided for 172.25.1.12 (System ID 1)
LOG   - SNMPv2 testing public credentials (public) for 172.25.1.12 (System ID 1)
LOG   - SNMPv2 using public credentials not connected to 172.25.1.12 (System ID 1)
LOG   - SNMPv1 testing passed credentials for 172.25.1.12 (System ID 1)
LOG   - SNMPv1 using passed credentials not connected to 172.25.1.12 (System ID 1)
LOG   - SNMPv1 no specific credentials provided for 172.25.1.12 (System ID 1)
LOG   - SNMPv1 no supplied credentials provided for 172.25.1.12 (System ID 1)
LOG   - SNMPv1 no default credentials provided for 172.25.1.12 (System ID 1)
LOG   - SNMPv1 testing public credentials for 172.25.1.12 (System ID 1)
LOG   - SNMPv1 using public credentials not connected to 172.25.1.12 (System ID 1)
LOG   - SNMP is unable to connect (bad credentials or device not responding) for 172.25.1.12 (System ID 1)
LOG   - nmap update for 172.25.1.12 (System ID 1)
DEBUG - System ID 1
LOG   - Attempt Windows audit for 172.25.1.12
LOG   - Windows audit for 172.25.1.12 (System ID 1)
DEBUG - Command Executed: %comspec% /c start /b cscript //nologo C:\xampplite\open-audit\other\audit_windows.vbs strcomputer=172.25.1.12 submit_online=y create_file=n struser=xxx\administrator strpass=******** url=http://xxx.xx.xxxxxxx.it/open-audit/index.php/system/add_system debugging=3 system_id=1
DEBUG - Return Value: 0
DEBUG - Command Output:
LOG   - Attempt to run audit_windows.vbs on 172.25.1.12 has succeeded
LOG   - Windows credential update for 172.25.1.12 (System ID 1)
LOG   - Completed processing 172.25.1.12 (System ID 1)

Regards.

P.S. If I manually run the script audit_windows.vbs strcomputer=172.25.1.12 submit_online=y create_file=n struser=xxx\administrator strpass=******** url=http://xxx.xx.xxxxxxx.it/open-audit/index.php/system/add_system debugging=3 system_id=1

Everything is working fine

Red.

    CommentAdd your comment...

    2 answers

    1.  
      1
      0
      -1

      We have a patch for what I suspect is causing your issue. Please see the below wiki page.

      Errata - 1.8.2 Discovery patch (Windows)

        CommentAdd your comment...
      1.  
        1
        0
        -1

        ..to discover a single Windows server it's enough to open Subnet Discovery and to put the server (netbios or fqdn) name instead of the IP Address and everything runs fine.

        Regards.

        Red.

          CommentAdd your comment...