need linux and network scripts for auditing in oav2

Asked by sureshbabu

Installed OAV2 and works fine could get all windows machines. I couldnt locate other scripts. can you pls provide the link for linux and nmap script.
Thanks in advance - suresh

Question information

Language:
English Edit question
Status:
Answered
For:
OAv2 Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Mark Unwin (mark-unwin) said :
#1

There are no linux or nmap scripts (currently) for OAv2. They are being worked on. See the forums at http://www.open-audit.org

Revision history for this message
Brandon Pierce (ihashacks) said :
#2

There is a development version of the GNU/Linux audit script available at:

https://bazaar.launchpad.net/~ihashacks/oav2/linux-audit-additions/view/head:/other/audit_linux.sh

It is far from perfect and currently only regularly tested on Debian/Ubuntu and CentOS/Redhat. More distributions are being worked on.

Revision history for this message
Brandon Pierce (ihashacks) said :
#3

I should probably clarify more:

1) the script is designed to run as root (or with sudo) directly on the device that you want to audit (so each server for example) and needs to be ran manually, via cron, etc (I push mine out via Puppet and cron for example)

2) once you copy the script, run it as "audit_linux.sh check_commands=y" to verify that you have the commands needed for a full audit (actualy packages required will vary by distro - I'm currently working on a "cheat sheet" for some of the more common distros)

3) test-run the script for any errors by running "audit_linux.sh submit_online=n create_xml=y"

4) edit the script's "url" variable with the URL of your OAv2 server then simply run "audit_linux.sh"

I'm currently testing 32 and 64-bit CentOS 5/6 and Ubuntu 10.04, 11.10, 12.04, and 12.10 on a mix of laptop, desktop, VMware, Hyper-V, QEMU, and KVM platforms. I hope to start testing Debian, RedHat, OpenSUSE, and SLES/SLED soon. Almost all of the physical hardware I am testing is on a wide range of Dell Vostro, OptiPlex, Latitude, and PowerEdge systems.

Having said that, I am using it daily in many environments. It might not work so well in yours. Please report back any issues though and I am happy to work with you on them.

Can you help with this problem?

Provide an answer of your own, or ask sureshbabu for more information if necessary.

To post a message you must log in.