The census module allows to launch a discovery of the equipments on a computer network and to exploit the returned information. It can be used to consult general information on the machines (IP address, type, name, services in operation, etc.), or to put equipment under supervision.
In this document, we will see how to use all the features offered by this module.
Presentation of the module
To access the census module interface, go to the Configuration > Equipment > Census.
Figure 1 - Composition of the census module
As shown in Figure 1, the census module consists of the following components:
- A search form
- A census release form
- A filter bar
- A control bar for the table
- A table of results
Launch a census
The launch of a census is done from the button Identify.
Figure 2 - Census initiation form
Several pieces of information can be filled in to start a census:
- Tab Network discovery settings
- HousingSelect the supervision box from which the census will be carried out.
- IP addresses IP addresses: IP addresses on which the network discovery is to be performed. You can specify either a range or a list of IP addresses (separated by commas).
- PurgeIf this box is checked, all data from previous censuses will be deleted before starting the new one.
- Tab Accounts
- SNMP and SNMP v3 connection Community : community to be used to retrieve information via SNMP protocol. This entry is not mandatory but the information retrieved will be more complete if it is correctly filled in. It is possible to enter several communities by separating them with commas. In this case, the box will use the community that provides the most information.
- Windows Login - Admin WMI: Enter the account to be used to test the WMI connection. This must be a host or domain administrator account. The format for a domain account is /. Attention These two fields are case sensitive.
- VMware Connection Account: enter the account to be used to test the VMware connection. This account must be a member of the "user" group and must have Read Only rights on the hypervisor.
- Hyper-V connection Hyper-V: Enter the account to be used to test the connection to a Hyper-V hypervisor.
- Citrix XEN Connection Account: enter the account to be used to test the connection to a Xen hypervisor.
Note IP address duplication: There can be no duplication of IP addresses in the census results. For example, if a previous census returned information for an IP address and a new census is to return information for that same IP address, the old information will be deleted and replaced.
Click on the button Validate allows you to launch the census. From then on, a progress bar appears. This one is automatically refreshed every 15 seconds. This allows you to evaluate the progress of the census.
Figure 3 - Progress Bar
Unlike the progress bar, the census data is not automatically refreshed in the results table. However, you can explicitly request this using the "play" button.
You can search the results using the search form:
Figure 4 - Search form
This form allows you to search for equipment according to several criteria:
- Name / addressOnly devices whose name or IP address contains the entered string will be displayed.
- Unanswered protocols Ping: allows you to display the devices that have not responded to Ping, SNMP or WMI. Note WMI connection is only available on Windows type equipment (Microsoft technology). Checking this box has no repercussion on other types of equipment.
- Supervision status If no box is checked, both will be displayed. If no box is checked, both will be displayed.
Note all these fields are cumulative. So if we are looking for the IP address 192.168.0.14 by checking the status UnsupervisedThe IP address will only be searched for equipment that is not supervised.
Filter by equipment type
Filtering according to the type of equipment can be done from the filter bar. This can be seen as a complement to the search form.
Figure 5 - Filter bar
Equipment can be selected according to the following types:
- All no filtering is performed, all equipment is displayed
- Windows Server : servers equipped with the Windows operating system
- Linux server : servers equipped with the Linux operating system
- Server (other): servers equipped with another operating system
- Printer : printers accessible from the network
- Phone IP phones, connected to the network
- Camera IP cameras, connected to the network
- Other equipment whose type could not be detected
Note As with the search form options, equipment filtering is performed cumulatively: if a search has been validated and you click on RoutersThis search will only be performed on routers.
Check the table
These bars are used to control the results table.
Figure 6 - Table control bar
Figure 7 - Data Refresh Buttons
These three buttons control the refreshment of the table data:
- The first launches a one-time data update.
- The second one allows to launch an automatic refresh: every 30 seconds, the data are automatically reloaded.
- The last one is its complement: it allows to stop the automatic update.
Figure 8 - Pagination
When too many lines are displayed, the data are paginated. The current page displayed is highlighted in green. The numbers that are not highlighted show the other available pages and allow access to them. The double arrow allows you to go to the last page of the table.
Perform an action on the selection
Figure 9 - Action on selection
The buttons Add to supervision and Delete from the census allow you to put a piece of equipment under supervision and to delete a piece of equipment from the census.
Note The action is launched as soon as the button is selected. It is therefore necessary to have previously selected the equipment on which the action must be performed.
Number of responses per page
Figure 10 - Selecting the number of lines per page
The last element of the control bar allows you to choose the number of lines to display on each page.
Exploit the table and the data collected
The results table is the central element of the census module. It allows to consult and exploit the data brought back by the discovery of the network.
Figure 11 - Results table
Each line of the table corresponds to an equipment present on the network. The main information on the equipment is displayed directly in this table:
- Actions If the equipment is not yet supervised, this column allows to select the equipment in order to apply an action to it. Next to the check box, a button in the form of an image displays a more detailed supervision form. On the other hand, if the equipment is already supervised, a specific icon indicates it.
- IP address IP address of the equipment from which the census was taken.
Note If a machine has several IP addresses, it may appear several times in the table.
- Host name Displays the name retrieved from NMAP. If no name was retrieved, its IP address is displayed.
- Description : description of the equipment. If it is a server, its operating system is displayed.
- Services List of services running on the machine.
Note Some services may be running although their port is closed. This information is displayed in the detailed information window.
- Protocols ping: allows you to know if the equipment has responded to the ping, SNMP or WMI protocols.
1. A registration green means that the box has :
- ping : received a response to the ping
- snmp : successfully established an SNMP connection
- wmi: successfully established a WMI connection
2. Red : the protocol in question did not allow to communicate with the machine concerned.
3. Grey and crossed out protocol not available for the machine in question
Detailed information window
A window displaying the detailed information of the machine appears when clicking on its IP address.
Figure 12 - Detailed information window
This information is grouped into four categories:
- General Information about the identification, hardware, operating system and census.
- Network Displays information about the machine's network interfaces.
Note : available only if SNMP has responded.
- Services The following information is available: services in operation when the census was taken. It also shows the port number associated with the service, its status (closed, open, filtered) and the service protocol (udp, tcp).
Note : available only if NMAP has responded.
Note 2 This tab can be directly displayed by clicking on the list of services in the results table.
- Storage Displays the partitions mounted on the device with their total space.
Note : available only if SNMP has responded.