Checking windows version

[Julian Hein]

Hi,

> I don't have a plugin ready for this, but it can all be 
> extracted from SNMP 
> information. Anyways, how do you want to analyze installed 
> hotfixes from 
> nagios? That IMHO makes no sense and there are other tools 
> that do that just 
> fine, eg. Retina from eEye Security to name a (very good) 
> commercial tool.
> 
> On Monday 25 October 2004 10:50, Sand Philipp wrote:
> > Hi list,
> >
> > I wonder if anyone got a plugin to check information about 
> the installed
> > windows version on a target host (Win 2000 Server, Win 2003 
> Server, State
> > of Hotfixes etc.) Best practice would be if you could do it 
> without any
> > extra client but nsclient installed on the target system...

MBSA (Microsoft Baseline Security Analyser) could be an option. It downloads a XML File from Microsoft with all data of current hotfixes and patches and then checks the system for missing ones and other possible vulnerabilities. It can be scheduled to run once a day and create a report in XML. A Nagios plugin could parse this report for problems.

I think it will be not easy, but possible. We are doing the same thing for debian, but that is easier to script :-)

Julian Hein

-- 
Julian Hein                   NETWAYS GmbH         
Managing Director             Deutschherrnstr. 47a 
Fon.0911/92885-0              D-90429 Nürnberg     
Fax.0911/92885-31                                  
jhein at netways.de              http://www.netways.de 


-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_idU88&alloc_id065&op=click
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null