Bigfix Asset Discovery - Nmap Question

(imported topic written by SystemAdmin)

We want to leverage Bigfix Asset Discovery (nmap) for compliance reasons, but we are seeing two problems.

  1. We do not use reverse DNS PTR records for almost all of our machines so the hostname is not popping up in bigfix under “unmanaged assets”. I know you can pull this information on Windows machines using nmap using either one of these options:

–script nbstat.nse

-A

-sC

The problem is, the Bigfix import service does not pull this data into the Bigfix database.

  • Is there any other way we can pull the hostname using the nmap command line options that will work with import service?
  • Is there any way to customize how the import service works so we can import this data?
  1. We notice that the MAC address is not being populated on machines were we span subnets in scanning. I assume this is because nmap is leveraging arp for IP to MAC resolution for machines on the same subnet. By using the same nmap options above against a Windows machine, you get hostname, user, MAC, domain. These are all valuable data elements.
  • Is there anyway to integrate this script scanning into the Bigfix nmap scanning process and import service process?

(imported comment written by kevin_friedheim)

Hi nicky, I quickly tried running these extra options through the scan wizard - but failed. After looking a little deeper, I got the following errors: http://pastebin.com/vdwmsbFg

If time permits, I will continue to figure out what went wrong, but would you mind showing me a scan xml output file that was run with the --script nbstat.nse -A -sC options?