[Xymon] Xymon nmap integrstion/plugin

[Henrik Størner]

Den 2014-02-21 8:18, Mate Nor skrev: 

> Is there any way to
integrate nmap or similar program into xymon web page. 
> What I would
like is to scan the network with nmap then write all the host into xymon
for monitoring.(from xymon web page) 
> May to do a security check with
nmap every day to see if someone taped into the network and make an
alarm in xymon. 
> 
> Thanks for all your help guys,

Depending on the
size of your network, I can see two ways of doing it: 

1) 'nmap -sP' to
sweep the network for IP's that respond. Write the output to a baseline
file, and then re-run the scan regularly and compare against the
baseline. Use the result in a custom test script and report the status
to Xymon (see the Xymon help-pages for help on custom scripts). 

2) If
you have a small network - e.g. your network is a /24 so you can have at
most 254 IP's - then you could put all of the IP's that must be inactive
on a separate page in Xymon, and tag then with '!conn". Xymon will then
try to ping them, and generate a red alert if they respond.


Regards,
Henrik 

 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20140221/852b8fcd/attachment.html>