The problem does not happen on Windows OS for lowercase or uppercase characters
Problem exists on running Relevance on the RedHat 6, BES Client Version 9.2.0.363 as I believe the Property relevance running from the BigFix server has issue with uppercase characters for displaying vs. when used locally on the QNA which has no issue. See below
BigFix server = OS Win2008 6.0.6002
BES API Version 9.2.3.68
BES Client Version 9.2.3.68
BES Console Version 9.2.3.68
BES Server Version 9.2.3.68
BES Web Reports Version 9.2.3.68
So here is the problem I am running into only on linux. I believe the relevance which is used locally on the RedHat 6, BES Client Version 9.2.0.363
If I run the relevance using the local QNA on the linux OS
Local QNA: Relevance 1 – LW code - still require formatting to a single line to work on local QNA
Q: ( (if (tcp of it) then (“TCP”) else (“UDP”)),local address of it as string & “:” & local port of it as string,(if (exists remote address of it) then (remote address of it as string & “:” & remote port of it as string) else (“:”)),(if (exists tcp state of it) then (tcp state of it as string) else (“-”)),(if (exists process of it and exists name of process of it) then (name of process of it) else (“-”)))of sockets of network
A: TCP, 0.0.0.0:22, LISTENING, sshd
A: TCP, 127.0.0.1:631, LISTENING, cupsd
A: TCP, 127.0.0.1:65443, LISTENING, nailslogd
A: TCP, 127.0.0.1:65443, ESTABLISHED, nailslogd
A: TCP, 127.0.0.1:53845, ESTABLISHED, mon
A: TCP, 0:0:0:0:0:0:7013:1847:8081, LISTENING, cma
A: TCP, 0:0:0:0:0:0:7013:1847:22, LISTENING, sshd
A: TCP, 0:0:0:0:0:0:7013:1847:631, LISTENING, cupsd
A: UDP, 0.0.0.0:5353, -, avahi-daemon
A: UDP, 0.0.0.0:34795, -, avahi-daemon
A: UDP, 0.0.0.0:631, -, cupsd
A: UDP, 0:0:0:0:0:0:7013:1847:52311, -, BESClient
Property Results: Same Relevance – attached LW Netstat.bes
TCP, 0.0.0.0:22, :, LISTENING, sshd
TCP, 127.0.0.1:631, :, LISTENING, cupsd
TCP, 127.0.0.1:65443, :, LISTENING, nailslogd This is happening because the established connection has the same listening port and now a new established port. That is why there are two of them.
TCP, 127.0.0.1:65443, 127.0.0.1:53845, ESTABLISHED, nailslogd
TCP, 127.0.0.1:53845, 127.0.0.1:65443, ESTABLISHED, mon
TCP, 0:0:0:0:0:0:f0ec:fa29:8081, :, LISTENING, cma
TCP, 0:0:0:0:0:0:f0ec:fa29:22, :, LISTENING, sshd
TCP, 0:0:0:0:0:0:f0ec:fa29:631, :, LISTENING, cupsd
UDP, 0.0.0.0:5353, :, -, avahi-daemon
UDP, 0.0.0.0:34795, :, -, avahi-daemon UDP, 0.0.0.0:631, :, -, cupsd
UDP, 0:0:0:0:0:0:f0ec:fa29:52311, :, -, - This is the problem issue as it seems that the Capitol Letter is causing the format to show a “”” - “”” dash instead of the name as I think it is something to do with the Capitol letter.
Local QNA: Relevance 2 – Formatted Relevance for Service Name , Port, Protocol
(if (it does not start with “-”) then it else nothing) of ((item 4 of it & “:” & following text of last “:” of item 1 of it & “:” & item 0 of it) of ( (if (tcp of it) then (“TCP”) else (“UDP”)), local address of it as string & “:” & local port of it as string, (if (exists remote address of it) then (remote address of it as string & “:” & remote port of it as string) else (“:”)), (if (exists tcp state of it) then (tcp state of it as string) else (“-”)), (if (exists process of it and exists name of process of it) then (name of process of it) else (“-”)) ) of sockets of network )
A: sshd:22:TCP
A: cupsd:631:TCP
A: nailslogd:65443:TCP
A: nailslogd:65443:TCP
A: mon:53845:TCP
A: cma:8081:TCP
A: sshd:22:TCP
A: cupsd:631:TCP
A: avahi-daemon:5353:UDP
A: avahi-daemon:34795:UDP
A: cupsd:631:UDP
A: BESClient:52311:UDP
T: 216079
Property Results: Same Relevance – attached CIP_Linux and Windows Ports for CSV.bes
sshd:22:TCP
cupsd:631:TCP
nailslogd:65443:TCP
nailslogd:65443:TCP
mon:53845:TCP
cma:8081:TCP
sshd:22:TCP
cupsd:631:TCP
avahi-daemon:5353:UDP
avahi-daemon:34795:UDP
cupsd:631:UDP
“ “ Missing as it does not pick up on the service name , therefore is not showing this BESClient because I think of the Capitol Letter. It is the only one that is capitol.
LW Netstat.bes (1.0 KB) CIP_Linux and Windows Ports for CSV.bes (1.8 KB)