03-15-2010 10:21 AM
Every XP Pro SP3 box on our LAN has so far showed up as "Windows-2000-LAN-Manager" in Thunderbolt.
03-15-2010 11:46 AM
As the trial TBA works today, we don't do any sort of heavy OS fingerprinting. Doing so might cause security software on machines or IDS/IPS systems to falsely flag malicious-intent activity from the TBA device. XP's SMB/CIFs server identifies itself as Windows-2000-LAN-Manager, and so, today, we just go with that. In the future, we are looking for other passive OS fingerprinting techniques to help us refine what the TBA presents at the portal. All suggestions are welcome!
-mike
03-15-2010 03:10 PM
If SNMP was installed on the workstations/servers would that make it easier to get a valid OS version? If so, then document it so that admins can opt to install SNMP on the systems.
03-15-2010 06:06 PM
Definitely. SNMP support is something I'd love to see prioritized high up the list during this trial. Marc,
-mike
03-15-2010 06:13 PM
From the marketing side I can say that we will be asking for the gathering and corresponding representation, across the board, of the most common MIB OID's, like CPU, memory, uptime, etc.
Marcos
03-15-2010 06:24 PM
Oh yes! All of those would be excellent. Free disk space would be excellent too.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide