Auto-discovery in a given subnet

[Jeremy Kister]

On 2/3/2011 6:24 PM, chirag.parikh at thomsonreuters.com wrote:
> encountered a scenario where I'm stuck. I need to configure so a
> specific subnet is being scanned and report the objects that respond to
> ping. That is if someone adds a machine in the network it should show up
> in argus and start monitoring it with default services Ping and HTTP,

Argus will execute any files it finds in your config/ directory if you 
have made them executable.  if you have one big config file instead of a 
directory of little files, i recommend you start by making one file 
called 000_defins that has your standard Argus definitions.

you can make another file called 001_servers that is executable. in 
that, you can script in whatever language you want and output Argus config.

what you want sounds rather easy, so if you want to give me some more 
details I might be able to whip something up.

supposing we're scanning 10.0.0.0/24, and we find 10.0.0.2 is alive via 
ping, what should argus call this host?  do you have reverse dns 
configured ?

-- 

Jeremy Kister
http://jeremy.kister.net./