Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

So, I have been tasked with researching and deploying some kind of network auditing software. All this really needs to do is be able to ping/TCP-connect-scan a handful of internal /24 networks at regular intervals (every 24h or whatever) and send out an email if a new host is discovered or if a previously-existing host has gone away. Silly-simple to implement via Perl hackery, but Bossman wants a Shiny Web Interface(tm) and doesn't really want to pay for it. I've played around a bit with Zenoss, but that seems like using a sledgehammer to swat a housefly. Do you folks know of any software that can do that? Preferably this would run on a linux box, but I'm not going to be overly-picky at this point...

Many thanks!

share|improve this question

4 Answers 4

The easiest way to do this is using something similar to Arpwatch

share|improve this answer
    
+1 for suggesting a scalable and intelligent approach to the problem. –  Helvick Nov 7 '09 at 1:11
    
Yes, but will it work in a switched environment? Or will I have to multi-home my scanning box so it can see arps on the many (4 and counting) /24 networks it'll have to monitor? –  law Nov 7 '09 at 1:43

Most network reporting software can do this kind of autodetection, so it's really a matter of finding something that fits your requirements. You mentioned ZenOSS being too heavy, and that's fair, but for this kind of thing you'll generally be looking at some sort of network monitoring framework.

I know that Zabbix can also do this kind of probing and detection, and it's reasonably lightweight if you don't configure all the extra bits. It may not be ideal, but it'll certainly work.

share|improve this answer

It sounds like nmap-diff does most of what you need. You'd have to convert its output to HTML but that's trivial if you're comfortable with Perl. :)

share|improve this answer

You can also try The Dude

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.