Hi Luca,
(man, I just spent 10 mins trying to find the “stormfront” OS, because I just watched The Boys!)
Can you get sysObjectID.0 & sysDescr.0 from these devices?
It seems our current OS matching code is :
$config['os'][$os]['discovery'][] = array( 'sysObjectID' => '.1.3.6.1.4.1.8072.3.2.8', 'sysDescr' => '/^NS-BSD/', );
You can find this in includes/definitions/os/bsd.inc.php
We probably just need to add some additional rules to match whatever they’ve changed!
Thanks,
Adam.
From: Luca Sasdelli via observium observium@lists.observium.org Sent: 26 August 2022 09:40 To: 'Observium' observium@lists.observium.org Cc: Luca Sasdelli luca@sasdelli.it Subject: [Observium] Re: Stormshield issues
Please don’t mind second issue in my previous email. With an SNMP tool I’ve got same readings, therefore it’s a firewall issue.
Best Regards
Luca
From: Luca Sasdelli via observium (observium@lists.observium.org mailto:observium@lists.observium.org ) <observium@lists.observium.org mailto:observium@lists.observium.org > Sent: Thursday, August 25, 2022 6:13 PM To: Observium <observium@lists.observium.org mailto:observium@lists.observium.org > Cc: Luca Sasdelli <luca@sasdelli.it mailto:luca@sasdelli.it > Subject: [Observium] Stormshield issues
Hi,
on several Stormshield firewalls, I read some issues:
* the firewalls are detected as Generic devices, while some time ago they were correctly detected as Stormshield firewalls * some ports report wrong speed: e.g. on 8 gigabit ports same appliance, some appears with 4Mbps, 20Mbps or 1Gbps, even by correcting them in its properties
The second one isn't simply a cosmetic issue, because threshold alerts are generated with ordinary traffic.
Best
LS