03-15-2010 10:21 AM
Every XP Pro SP3 box on our LAN has so far showed up as "Windows-2000-LAN-Manager" in Thunderbolt.
03-15-2010 11:46 AM
As the trial TBA works today, we don't do any sort of heavy OS fingerprinting. Doing so might cause security software on machines or IDS/IPS systems to falsely flag malicious-intent activity from the TBA device. XP's SMB/CIFs server identifies itself as Windows-2000-LAN-Manager, and so, today, we just go with that. In the future, we are looking for other passive OS fingerprinting techniques to help us refine what the TBA presents at the portal. All suggestions are welcome!
-mike
03-15-2010 03:10 PM
If SNMP was installed on the workstations/servers would that make it easier to get a valid OS version? If so, then document it so that admins can opt to install SNMP on the systems.
03-15-2010 06:06 PM
Definitely. SNMP support is something I'd love to see prioritized high up the list during this trial. Marc,
-mike
03-15-2010 06:13 PM
From the marketing side I can say that we will be asking for the gathering and corresponding representation, across the board, of the most common MIB OID's, like CPU, memory, uptime, etc.
Marcos
03-15-2010 06:24 PM
Oh yes! All of those would be excellent. Free disk space would be excellent too.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: