Solaris Analysis Auditing ?

[tarn]

Hey guys & gals!

I'm just about to embark on a mammoth project to take-over a reference model consisting of a number of Solaris 2.6 - 8 servers, NetApp filers and network devices and with little documentation available my first objective is to audit what is there and try to get some documentation in place (while doing the day-job at the same time, sysadmin).

So, I know that I could write a set of scripts to scan (for want of a better phrase) the servers and appliances to audit what’s there but, are any of you aware of anything available already that I can utilise "save re-inventing the wheel"?

There are some good scripts within Gideon’s document discussed here >
thread60-411053 other suggestions?

Cheers.

 

[tarn]

Ok I think i've got something together that will do the job based on a sys.conf script, but would apriciate any other suggestions.

Laurie.

 

[dynamint]

I had a similar task a while back and didn't even have access to all of the servers at the time. They were all on a single network, however so I used a security tool called nmap to portscan them:

# nmap -v 10.10.0.1-10

The output will show the daemons running on each system. You'll find webservers, oracle db systems, NT services, etc. with little effort.

Use nmap with a variety of switches and you'll retrieve all sorts of information like OS, version, vendor (for networking hardware), etc. The app is free and runs on most UNIX platforms. Here's the man page:

http://www.insecure.org/nmap/data/nmap_manpage.html

Good luck,

Paul

 

[tarn]

Yes thanks, I use nmap but not on the corporate LAN thanks for your thoughts.

Laurie.