RE: [Nagios-users] nagios client for security/asset mgmt..
Nagios _monitors_ stuff. To accurately monitor, you need known quantities. Nagios checks these known quantities at regular intervals and alerts when they change or are out of bounds. Assessing a system is a different beast. All the quantities are unknown. After assessment, you end with a database of known quantities, which you can THEN plug in the important ones into nagios to monitor. I suggest you look at some tools that may better match your needs: psinfo nmap WINventory more at http://software.newsforge.com/article.pl?sid=04/11/18/179206 -Original Message- From: bruce [mailto:[EMAIL PROTECTED] Sent: Monday, November 07, 2005 9:45 AM To: nagios-users@lists.sourceforge.net Subject: [Nagios-users] nagios client for security/asset mgmt.. hi... curious to know if anyone has created a cleint for windows boxes to be used as an asset mgmt client? thinking about a client that would return every bit of information about the system as possible!! -hardware -software -ports -interfaces -services -etc.. also interested to know if anyone has created/used/knowledge of a msoft/windows client for use in a security environment? the client would/should return information regarding.. -hardware -software -ports -interfaces -services -apps running -virus apps/etc.. -malware app running/etc... -etc.. has anyone knowledge of anyone using nagios as the server/host/central hub for this kind of information/processes.. thanks -bruce [EMAIL PROTECTED] --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
RE: [Nagios-users] nagios client for security/asset mgmt..
You're both right. With proper shell scripting, Nagios can use just about any external application to determine status but that status must be something that can be boiled down to a single OK/WARNING/CRITICAL data point with a single line of human readable output. In your specific scenario, nagios would only be useful to determine if one of your metrics (hardware, software, ports, etc) changed from a known good value, not for cataloging systems. Bruce, you might want to read over the Developer Guidelines at http://nagiosplug.sf.net to get a better idea of what nagios is going to be expecting from your client application. -- Marc -Original Message- From: [EMAIL PROTECTED] [mailto:nagios-users- [EMAIL PROTECTED] On Behalf Of bruce Sent: Monday, November 07, 2005 2:41 PM To: 'Tedman Eng'; nagios-users@lists.sourceforge.net Subject: RE: [Nagios-users] nagios client for security/asset mgmt.. eng... thanks for the reply... however, my understanding of nagios, is that it can use client apps, and that it can monitor the outputs/states of these apps (depending on the clients/nagios settings...) if that's the case, my original question is valid, as i'm trying to figure out if clients have been developed/used to do what i suggested... -bruce -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Tedman Eng Sent: Monday, November 07, 2005 11:46 AM To: '[EMAIL PROTECTED]'; nagios-users@lists.sourceforge.net Subject: RE: [Nagios-users] nagios client for security/asset mgmt.. Nagios _monitors_ stuff. To accurately monitor, you need known quantities. Nagios checks these known quantities at regular intervals and alerts when they change or are out of bounds. Assessing a system is a different beast. All the quantities are unknown. After assessment, you end with a database of known quantities, which you can THEN plug in the important ones into nagios to monitor. I suggest you look at some tools that may better match your needs: psinfo nmap WINventory more at http://software.newsforge.com/article.pl?sid=04/11/18/179206 -Original Message- From: bruce [mailto:[EMAIL PROTECTED] Sent: Monday, November 07, 2005 9:45 AM To: nagios-users@lists.sourceforge.net Subject: [Nagios-users] nagios client for security/asset mgmt.. hi... curious to know if anyone has created a cleint for windows boxes to be used as an asset mgmt client? thinking about a client that would return every bit of information about the system as possible!! -hardware -software -ports -interfaces -services -etc.. also interested to know if anyone has created/used/knowledge of a msoft/windows client for use in a security environment? the client would/should return information regarding.. -hardware -software -ports -interfaces -services -apps running -virus apps/etc.. -malware app running/etc... -etc.. has anyone knowledge of anyone using nagios as the server/host/central hub for this kind of information/processes.. thanks -bruce [EMAIL PROTECTED] --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue
RE: [Nagios-users] nagios client for security/asset mgmt..
Bruce, You are thinking like ITIL's configuration database, something like that? So you need a client who can gather all info you need to report, and then send it to nagios, to monitor all those resources? Well, Nagios operates in such a manner that it can wait for a result of any kind, as long it is in Nagios protocol, and report to anyone who needs to be reported, about the monitored host environment. Then, yes, you can use Nagios to keep a server configuration up-to-date monitored. But, you will need to write your plugin, and use nrpe, or whichever client who could run this plugin, and return status of CRITICAL, WARNING, UNKNOWN, or OK. Determined by your needs. Well, i am thinking Unix, talking about nrpe. Don't know if there is any port of NRPE for Microsoft's O.S. but I suspect there is. Someone with more knowledge than me surely can tell you about it. Cheers. On Mon, 2005-11-07 at 12:40 -0800, bruce wrote: eng... thanks for the reply... however, my understanding of nagios, is that it can use client apps, and that it can monitor the outputs/states of these apps (depending on the clients/nagios settings...) if that's the case, my original question is valid, as i'm trying to figure out if clients have been developed/used to do what i suggested... -bruce -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Tedman Eng Sent: Monday, November 07, 2005 11:46 AM To: '[EMAIL PROTECTED]'; nagios-users@lists.sourceforge.net Subject: RE: [Nagios-users] nagios client for security/asset mgmt.. Nagios _monitors_ stuff. To accurately monitor, you need known quantities. Nagios checks these known quantities at regular intervals and alerts when they change or are out of bounds. Assessing a system is a different beast. All the quantities are unknown. After assessment, you end with a database of known quantities, which you can THEN plug in the important ones into nagios to monitor. I suggest you look at some tools that may better match your needs: psinfo nmap WINventory more at http://software.newsforge.com/article.pl?sid=04/11/18/179206 -Original Message- From: bruce [mailto:[EMAIL PROTECTED] Sent: Monday, November 07, 2005 9:45 AM To: nagios-users@lists.sourceforge.net Subject: [Nagios-users] nagios client for security/asset mgmt.. hi... curious to know if anyone has created a cleint for windows boxes to be used as an asset mgmt client? thinking about a client that would return every bit of information about the system as possible!! -hardware -software -ports -interfaces -services -etc.. also interested to know if anyone has created/used/knowledge of a msoft/windows client for use in a security environment? the client would/should return information regarding.. -hardware -software -ports -interfaces -services -apps running -virus apps/etc.. -malware app running/etc... -etc.. has anyone knowledge of anyone using nagios as the server/host/central hub for this kind of information/processes.. thanks -bruce [EMAIL PROTECTED] --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue
