Hi Luca,

(man, I just spent 10 mins trying to find the “stormfront” OS, because I just watched The Boys!)

Can you get sysObjectID.0 & sysDescr.0 from these devices?

It seems our current OS matching code is :

$config['os'][$os]['discovery'][] = array( 'sysObjectID' => '.1.3.6.1.4.1.8072.3.2.8', 'sysDescr' => '/^NS-BSD/', );

You can find this in includes/definitions/os/bsd.inc.php

We probably just need to add some additional rules to match whatever they’ve changed!

Thanks,

Adam.

From: Luca Sasdelli via observium observium@lists.observium.org Sent: 26 August 2022 09:40 To: 'Observium' observium@lists.observium.org Cc: Luca Sasdelli luca@sasdelli.it Subject: [Observium] Re: Stormshield issues

Please don’t mind second issue in my previous email. With an SNMP tool I’ve got same readings, therefore it’s a firewall issue.

Best Regards

Luca

From: Luca Sasdelli via observium (observium@lists.observium.org mailto:observium@lists.observium.org ) <observium@lists.observium.org mailto:observium@lists.observium.org > Sent: Thursday, August 25, 2022 6:13 PM To: Observium <observium@lists.observium.org mailto:observium@lists.observium.org > Cc: Luca Sasdelli <luca@sasdelli.it mailto:luca@sasdelli.it > Subject: [Observium] Stormshield issues

Hi,

on several Stormshield firewalls, I read some issues:

* the firewalls are detected as Generic devices, while some time ago they were correctly detected as Stormshield firewalls * some ports report wrong speed: e.g. on 8 gigabit ports same appliance, some appears with 4Mbps, 20Mbps or 1Gbps, even by correcting them in its properties

The second one isn't simply a cosmetic issue, because threshold alerts are generated with ordinary traffic.

Best

LS