If they are populating AD with it somehow, you'll need something to query LDAP providing the computer name to get the attribute they're updating.
They're probably using SMS, which has a Microsoft SQL backend, which would be different libraries for nTop. The SQL query is pretty simple though to get the last interactive login username for a given IP or computer name. Two different routes, getting nTop to talk to a MSSQL database vs. an LDAP server. Your best bet is to keep it outside of nTop. Get someone to create your team a web app (ASP/ASP.NET since it sounds like you're an MS/AD shop) that asks for a computer name, does the select against the SMS database, and provides you what you want. It's less than 10 lines of ASP, I've done it at a previous position but don't have the code anymore... Or just query on an as-needed basis with psloggedin like Phil suggests, but you'll need a certain level of access on the target machine... Jeremy Campbell Premium Financing Specialists, Inc. From: [email protected] [mailto:[email protected]] On Behalf Of Gary Gatten Sent: Wednesday, June 17, 2009 4:30 PM To: [email protected] Subject: Re: [Ntop] create additional resolve or "WhoIS" function? We have SMS, Kerberos, and who knows what else. All I know is right now I have to call the LAN dudes and they look up the IP in AD. Don't know if it comes from a login.script process, accounting function, don't care. I know it's there and I can get at it - somehow! ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Jeremy Campbell Sent: Wednesday, June 17, 2009 4:18 PM To: [email protected] Subject: Re: [Ntop] create additional resolve or "WhoIS" function? How are you going to populate AD with this information to associate a machine (computer object) with its user? There is no association or recording, by default, in AD, unless you have a login script updating the computer object or a table somewhere. Or if you have something like LANDesk or SMS that manages the PCs and records the interactive logins for your workstations, and query against that. Jeremy Campbell Premium Financing Specialists, Inc. From: [email protected] [mailto:[email protected]] On Behalf Of Gary Gatten Sent: Wednesday, June 17, 2009 3:25 PM To: [email protected]; [email protected] Subject: [Ntop] create additional resolve or "WhoIS" function? Hello, In our environment our machine names (DNS, WINS, etc.) are asset ID numbers - not common user names. When trying to figure out a user name for a specific IP, it's kinda a hassle. I'm wondering if someone would be interested in building me an additional resolve or whois function so I can resolve these names against an LDAP / AD table. I THINK I can get the visibility required to do so via LDAP. Ideally the resolve / lookup process will do this new function if an IP address falls within a defined range (our internal RFC-1918 IP's for example). If that's too much hassle, if I had an additional button on the html page(s) to "getUnameFromLDAP" - that would be cool too. If $$ would be required to make this happen quickly - or at all - let me know and I'll see what I can do. Thanks! Gary "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system."
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
