Page History

Shinken Enterprise allows you to detect network checks and physical type of your servers located in your IT.

Edit and add new network scan list
The network scan can be setup directly

...

in the *Administration* *Interface*.

First click on the discovery source in the home page.	Image Added

Then click on the "See nework scan list" button:	Image Added

You can list the current network scan in

...

By default you will have two samples.

...

the Discovery menu.

You can enable new scan with

...

the Add new scan

...

button.	Image Added

And you will see the configuration of a new scan:	Image Added

You must set up the following parameters:

...

Name
IP range: must match

...

a nmap

...

command range definition

Info
for example: 172.16.1.1-254

Scan interval, in minutes
You can setup notes about this scan

Adding a new scan will automatically enable it and your new hosts or your new tags will appears in a few minutes.

Add new port to host template rule

Without rules, the raw data that is being generated by the discovery scripts is useless. The rules are defined in the /etc/shinken/discovery_rules.cfg file.

Here is an example of how to set the ftp host template for anything that is detected by nmap with the TCP/21 port open:

There are three main parts for a rule:

discoveryrule_name: should be unique
creation_type: should be host
openports: regexp about the port that will be match. The ^ and $ is for the regexp thing, so 21 and only 21 will be match, and not 210 for example.

+use: This mentions the template from which the generated object will inherit from. You can add as many properties as you want.

Code Block
define discoveryrule { discoveryrule_name FtpRule creation_type host openports ^21$ +use ftp }

Here is the list of the default port to Host templates rules:

Port	Host template
27017	mongodb
53	dns
25	smtp
465	smtps
3306	mysql
22	ssh
110	pop3
995	pop3s
9100	printer-hp
1521	oracle
80	http
443	https
1433	mssql
2301	hp-asm
143	imap
993	imaps
389	ldap
636	ldaps

Security: nmap command parameters

Here are the the parameters used by the nmap command used by this module:

-sU
-sT
--min-rate 1000
--max-retries 3
-T4
-O

Page tree

Versions Compared

Old Version 2

New Version Current

Key

Edit and add new network scan list

Add new port to host template rule

Here is the list of the default port to Host templates rules:

Security: nmap command parameters