MacTrack MacAuth Filters not working.

[prasadpkulkarni]

Hi ,

MacTrack MacAuth Filters are not working , the Authorized MAC's becomes unauthorised in next Scan , what could be the reason ?

I am using Mactrack- 2.7

Thanks & regards,

Prasad.

[TheWitness]

Post a bug report here: bugs.cacti.net. Please include the following:

1) For the device that see's the MAC, I need the debug output:

Code: Select all

php -q mactrack_scanner.php --help[/quote]

Will give you instructions as to how to perform a debug scan.

TheWitness

[prasadpkulkarni]

Done ..Posted bug report with the debug output of mactrack_scanner.php

http://bugs.cacti.net/view.php?id=1777

Thanks in advance.

Regards,

Prasad.

[prasadpkulkarni]

Any clues ??

I updated to 2.8 ..but no luck same issue.

Posting screeshot of DB query to Cacti database for 'mac_track_ports' table , which shows that for 1st four scan the MAC Address was authorised then it became unauthorised for subsequent scans automatically.

Thanks & regards,

Prasad.

[TheWitness]

The author is busy at the moment.

TheWitness

[prasadpkulkarni]

Larry,

Thanks for the reply.

Just quick question - I just need a feature to get alert when mactrack Detect Rogue Macs , even though you said it is done ( http://forums.cacti.net/viewtopic.php?t=17146) I don't know how it works or how to configure it , can you please help on this ??

I thought MAC Authorization is related to it , so I reported a bug.

Thanks & regards,

Prasad.

[TheWitness]

Yes it is. Its likely a very minor bug. However, I'm swamped at the moment.

[prasadpkulkarni]

Thanks Larry for the reply !!

Waiting for the bug to get fixed , hope you will get time soon to fix it.

Regards,

Prasad.

[socain]

Until he gets it fixed i created a cron job that run the following command. It will back authorize all scans so if this is not wanted you may not want to use it. I just need to see devices on any scan that i have not authorized so it works well for me...Figured i would post in case it may help in the mean time.

/bin/mysql cacti -e "update mac_track_ports set authorized = '1' where mac_address IN (select mac_address from mac_track_macauth)"

[prasadpkulkarni]

Socain,

This seems to be better solution , I will use this and let you know how it goes.

Meanwhile can you also help me on below please ...

1) "Select All" check box doesn't work , it doesn't select all MAC which I want to authorize, does it working for you?
2) Does database maintenance happens automatically for you ? not working for me
3) How do you check "Unauthorized" MACs ? by selecting drop down menu of "Authorised" ? is there any option to highlight or send an alert e-mail when it detects Rogue device ?

Thanks in advance

Regards,

Prasad.

[TheWitness]

Make sure you log the bugs in Mantis (http://bugs.cacti.net). It's going to take me a while to get back to bugfixes, but I'll get there.

TheWitness

[socain]

Prasad,

1) The select all wasn't working for me so i reviewed all macs then authorized them with t hese queries:

insert into mac_track_macauth (mac_address) SELECT DISTINCT mac_address FROM mac_track_ports;

update mac_track_macauth set description='Added from MacView', added_date='2010-07-13 12:23:00', added_by='1';

2) Not sure about the maintenance at the moment

3) Yeah, i just use the drop down and select "No" for now. I started looking at the poller and functions to get the email to work but i just didn't have the time to reverse engineer it. If i come up with something i will post for you. Basically you just need to run a query, after the cron job in the earlier post, on mac ports table and select macs where authorized = 0 and email them.

Witness,

Okay, I'll post them there. I understand you're busy and really appreciate all your development on such helpful tools.

[prasadpkulkarni]

Thanks Socain for the reply !!!

The cron job is working prefectly fine , I used "mutt" for getting mails for Unauthorized MACs.

Thanks for logging BUG for "Select All" checkbox issue.

I am now eagerly waiting Larry to get this bugs fixed so that we can use his great plugin effectively !!!

Regards,

Prasad.