System will not find missing service packs.
|
Logged in as: Guest
|
|
Users viewing this topic:
none
|
|
Login  | |
|
System will not find missing service packs. - 17.Jul.2003 6:41:00 PM
|
|
|
mseiler
Posts: 17
Joined: 15.Jul.2003
From: Fremont, CA
Status: offline
|
Half of my systems will not show the needed service packs or other updates needed. The only common thread I can find in the debug screen is a line that reads:
Check for missing patches ...
Unable to determine language identifier!
Unable to continue with patch verification!
Why? What does this mean and how come it is only on some systems? How do I fix it?
|
|
|
|
|
RE: System will not find missing service packs. - 17.Jul.2003 10:38:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
Can you post the whole section for the debug screen in that area.
Also, what version of LNSS are you running? 3.3 I can tell, but what date 2003 07 09 version or 2003 07 17 version?
Thanks.
eric
|
|
|
|
|
RE: System will not find missing service packs. - 17.Jul.2003 11:07:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
We should see something like:
[192.168.1.33]
SMB probing ...
Connecting ...(1/6)
Name "MILL24" encoded as "ENEJEMEMDCDECACACACACACACACACACA"
Session established.(2/6)
Security mode : user
Protocol negotiated.(3/6)
Operating system : Windows 2000
Domain : WORKGROUP
LAN manager : Windows 2000 LAN Manager
NULL session established.(4/6)
Connected to IPC$.(5/6)
No share list.
Read server info ...
List trusted domains ...
List shares ...
List groups ...
List users ...
List services ...
List sessions ...
List network transports ...
List drives ...
Read remote time of day ...
Read password policy ...
Connect to remote registry ...
Querying registry ...
Basic info
Run keys
Service Pack
Hot Fixes
Checking Registry Alerts ...
Internet Explorer version : 6.0000
Check for missing patches ...
Language identifier: 0409 => English
Installed Products :
-> Windows 2000 Professional Service Pack 4
-> Internet Explorer 6 Service Pack 1
-> Office 2000 Gold
Ok, this is assuming we made a valid connection to the machine up in the first set of lines there, are you getting read info on the groups, users, etc?
if not, then our issue is with your user rights most likely.
if not, then lets look at the registry key on the machines that are having problems, look at:
HKLM\SYSTEM\CurrentControlSet\Nls\Language\InstallLanguage
Does the Install Language String Key exist? If so what is the value of it?
My guess is basically 1 of 2 things with the limited info provided:
1. Bad Credentials so not able to pull all the info needed.
2. Registry value LNSS is quering doesn't exist, or is screwed up on those machines.
Or actually 3, back to the drawing board when provided with more info....
eric
|
|
|
|
|
RE: System will not find missing service packs. - 18.Jul.2003 12:48:00 PM
|
|
|
mseiler
Posts: 17
Joined: 15.Jul.2003
From: Fremont, CA
Status: offline
|
This is what I get:
[192.168.20.206]
NETBIOS/SMB is not enabled on this computer.
Resolving 192.168.20.206...
UDP scanning thread started ...
TCP scanning started ...
2 open port(s).
Gathering banners ...
80 - Trying to determine web server type
Server : SonicWALL
Waiting for UDP thread ...
Operating System : probably Unix
Alerts probing ..
Checking FTP Alerts ...
Checking DNS Alerts ...
Checking Mail Alerts ...
Checking Service Alerts ...
Checking RPC Alerts ...
Checking Miscellaneous ...
Checking Information ...
CGI probing ...
Please wait ...
CGI probing finished.
[192.168.20.211]
SMB probing ...
Connecting ...(1/6)
Name "BN9" encoded as "ECEODJCACACACACACACACACACACACACA"
Session established.(2/6)
Security mode : user
Protocol negotiated.(3/6)
Operating system : Windows 2000
Domain : BNC
LAN manager : Windows 2000 LAN Manager
NULL session established.(4/6)
Connected to IPC$.(5/6)
No share list.
Establishing remote session (NT way) ...
Username : "Administrator"
Session established OK.
Read server info ...
List trusted domains ...
List shares ...
List groups ...
List users ...
List services ...
List sessions ...
List network transports ...
List drives ...
Read remote time of day ...
Read password policy ...
Connect to remote registry ...
Querying registry ...
Basic info
Run keys
Service Pack
Hot Fixes
Checking Registry Alerts ...
Internet Explorer version : 6.0000
Check for missing patches ...
Unable to determine language identifier!
Unable to continue with patch verification!
Check security audit policy ...
--> Failed to open policy on the remote system
UDP scanning thread started ...
TCP scanning started ...
3 open port(s).
Gathering banners ...
UDP scanning thread stopped.
Alerts probing ..
Checking FTP Alerts ...
Checking DNS Alerts ...
Checking Mail Alerts ...
Checking Service Alerts ...
Checking RPC Alerts ...
Checking Miscellaneous ...
Checking Information ...
Closing connection ...
|
|
|
|
|
RE: System will not find missing service packs. - 18.Jul.2003 2:01:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
quote:
[192.168.20.206]
NETBIOS/SMB is not enabled on this computer.
Resolving 192.168.20.206...
here is the first issue/clue.
Basically the first SMB calls that it makes to this machine are not answered. Why? Don't know, see it on some of mine all the time. Don't know if it is due to the type of network card or its driver or what, but on all of my Dell systems GX240 and GX260 that have internal nic's i have this problem initially.
My fix, though time consuming is this, after it has run once, goto Scan > GatherInformation from All
This will rerun the gather info stage of the scan. Since it now knows that these machines are windows 2000 and has been able to make that connection before, it will be able to connect to the registry and check for patches.
eric
|
|
|
|
|
RE: System will not find missing service packs. - 18.Jul.2003 4:04:00 PM
|
|
|
mseiler
Posts: 17
Joined: 15.Jul.2003
From: Fremont, CA
Status: offline
|
Tried it but the program locks up on systems and does nothing. It gets to the List Shares line and just stays there.
|
|
|
|
|
RE: System will not find missing service packs. - 18.Jul.2003 4:59:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
k, will pass it onto development on Monday, now that you mention it, saw that once or twice before.
It shouldn't hang on the List Shares.
Verify that Microsoft Client is installed, File and Print Sharing is installed (and active) and that Messenger Service is running.
eric
|
|
|
|
|
RE: System will not find missing service packs. - 18.Jul.2003 5:07:00 PM
|
|
|
Guest
|
The system it was hanging on is an XP system. Second after doing individule scans the smb/bios error went away but the 13 units still reported no language identifier and thus gave me no patch information. Also 6 units will not allow me to turn on security auditing. I have a licence for my product and tech support at GFI does not know what they are doing with their own product. This forum stuff takes to long. How can I talk to a real person to solve the issues after all I paid for it?
|
|
|
|
|
RE: System will not find missing service packs. - 18.Jul.2003 5:56:00 PM
|
|
|
mseiler
Posts: 17
Joined: 15.Jul.2003
From: Fremont, CA
Status: offline
|
I also checked the Language Identifier Key on a system that was not giving me patches and it was valued at 0409.
|
|
|
|
|
RE: System will not find missing service packs. - 19.Jul.2003 10:32:00 AM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
tried to post this last night, but my internet connection at home died:
The reason it does not get an identifier code is because it has not been able to make the connection to the registry. This goes back to the message:
quote:
[192.168.20.206]
NETBIOS/SMB is not enabled on this computer.
Resolving 192.168.20.206...
The first thing that needs to be determined is why it could not make a connection via SMB. Is it the same machines every time, if so what is the common factor?
Once it can make that connection it will be able to connect to the registry and get the language identifier and also be able to tell what hot fixes are installed and what is setup for security auditing. All of that is dependent on the program connect to the registry and all of that is dependent on the SMB calls/connections.
As for support, my understanding is most of it is done via email, forums, or the support lines. I do this on the side and try to answer whatever questions I can. The development team is located throughout Europe, so there is always a time issue there also.
So back to my other question, what is common about those machines that it can't make the connection too the first time around? Specific NIC cards, specific versions of drivers, etc? Also, as I asked in my first email, what version are you running? Click on Help > Version Info.
I check in on the forums every few hours or so when time permits every 30 mins or so, or other days every 6 hours. Any main issues that I can't figure out or bugs we can determine will get forwarded directly onto the development team.
eric
|
|
|
|
|
RE: System will not find missing service packs. - 21.Jul.2003 4:05:00 PM
|
|
|
mseiler
Posts: 17
Joined: 15.Jul.2003
From: Fremont, CA
Status: offline
|
I am running 3.3 build 2003 07 09. The units that continue to give me incorrect information have three different kind of nic cards. All of the printer sharing and Netbios over TCP-ip are the same for the whole network. When I do a gather information on a system that has already been scanned but is not reporting all of the information it reads:
[192.168.20.132]
SMB probing ...
Connecting ...(1/6)
Name "BNCD4" encoded as "ECEOEDEEDECACACACACACACACACACACA"
Session established.(2/6)
Security mode : user
Protocol negotiated.(3/6)
Operating system : Windows 2000
Domain : BNC
LAN manager : Windows 2000 LAN Manager
NULL session established.(4/6)
Connected to IPC$.(5/6)
No share list.
Establishing remote session (NT way) ...
Username : "Administrator"
Session established OK.
Read server info ...
List trusted domains ...
List shares ...
List groups ...
List users ...
List services ...
List sessions ...
List network transports ...
List drives ...
Read remote time of day ...
Read password policy ...
Connect to remote registry ...
Querying registry ...
Basic info
Run keys
Service Pack
Hot Fixes
Checking Registry Alerts ...
Internet Explorer version : 6.0000
Check for missing patches ...
Unable to determine language identifier!
Unable to continue with patch verification!
Check security audit policy ...
Auditing is enabled (262143)
Events audited :
-> Audit all events
-> Audit all events
UDP scanning thread started ...
TCP scanning started ...
3 open port(s).
Gathering banners ...
UDP scanning thread stopped.
Alerts probing ..
Checking FTP Alerts ...
Checking DNS Alerts ...
Checking Mail Alerts ...
Checking Service Alerts ...
Checking RPC Alerts ...
Checking Miscellaneous ...
Checking Information ...
Ready
This indicates that the SMB is probing but still the same error message for the updates. I see no similatities with the non-reporting units as compared to the reporting units.
|
|
|
|
|
RE: System will not find missing service packs. - 21.Jul.2003 5:12:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
Ok, first off, I'd recommend upgrading to the following version:
Version: 3.3 Build 20030716
you can get it at: ftp://ftp.gfisoftware.com/lannetscan.exe
Don't think that will fix this issue, but it would be best to be working with the latest version to start with.
Next, looks like you are using specific credentials. I'd recommend logging in locally with whatever credentials you want to use and set it to use existing credentials. See if you get the same results. In certain cases Specific Credentials were not working in 3.2, I don't know if that is fixed in 3.3 or not, it was actually an issue of Windows using a mix between Existing and Supplied credentials regardless of what it was told to use.
You do appear to be pulling some registry information, such as Internet Explorer Version 6.0 and the Auditing.
I'm also assuming that the account you are using, administrator, does have administrative rights and hasn't been moved out of the administrative group (using regedt32 it appears that all users have at least read access to key, so I doubt it is an issue with the user account being used, but... have to check).
One other thing to check that I just thought of, see if you can make remote registry connections to the box with regedit. This will most likely be based off your current credentials. Anyway, just a thought.
On another note, emailed off to development last night on this thread and also on the issue with rescanning and having it chock on list shares.
As for Netbios over TCP-IP... ??? shouldn't be needed, and off the top of my head I don't recall this being an option in 2000, thought that was an old 9x thing?
As for 3 ports open, what 3 are they? 135, 137, 138, 139, 445, etc? also what protocol TCP or UDP, need a list of both UDP and TCP ports.
eric
|
|
|
|
|
RE: System will not find missing service packs. - 21.Jul.2003 6:18:00 PM
|
|
|
mseiler
Posts: 17
Joined: 15.Jul.2003
From: Fremont, CA
Status: offline
|
Tried running scan under no credencials (just what logged on as. Got less information and all computers reported no information on patchs. I can remote connect to the registries. The TCP open ports are - 135 - 139 - 445. The UDP ports are 135 - 137 - 138 - 445.
|
|
|
|
|
RE: System will not find missing service packs. - 21.Jul.2003 6:19:00 PM
|
|
|
mseiler
Posts: 17
Joined: 15.Jul.2003
From: Fremont, CA
Status: offline
|
Net-bios over TCI is found on the WINS tab of the TCP-IP configuration. When I turned it on I got more information.
|
|
|
|
|
RE: System will not find missing service packs. - 21.Jul.2003 7:07:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
ah, wins, forgot about that (we haven't run it where I work for a year or two now).
Ok, ports open seem to coincide with what I have (therefore I'm assuming all services needed running are, File and Print, Microsoft client and Messenger).
Did you upgrade to the latest version?
As for less info, that would be because the user you are logged on as has no rights to the machine you scanned. Should have been a bit more clear, you'll want to log on locally as whatever you were using as the specific credentials if that is possible, so log on locally as Administrator and run the scan.
I would recommend a packet capture, so far I haven't been able to reproduce what you are seeing there, and nobody else has any issues that I'm aware of like this.
With a packet capture we can look at what error messages may be getting returned.
Waiting on an email back from the development team on a few questions in regards to this also.
Other things you can try/set in the languard.ini file that might shed some light are:
[Debug]
; display debug messages ? 1=yes, 0=no
showDebug=1
; show received packets (hex dump) ? 1=yes
showRecv=0
; show sent packets ? 1=yes
showSent=0
; verbose messages ? 1=yes
Verbose=1
; show verbose messages during patch discovery
DebugPatches=1
; write the contents of the debug window to debug.log
SaveDebugToFile=1
VeryVerbose=1
All of those settings should already be there, you'll just have to turn them on except VeryVerbose, you'll actually have to add that option.
Most of that will give you more info once you connect to the machine, so it might not help in the current situation.
I think the main thing will be:
1. Upgrade to 3.3 2003 0716
2. Do a packet capture unless I can reproduce the issue on my end or the main testers can.
Other questions:
Back to other questions, what is different? Security Policies perhaps, firewalls on the machine, specific antivirus software, etc.
Also, if you install LNSS on a different machine do you get the same machines not reporting patch info? If so, it is back to what is different on those machines, what specifically don't they like. If they scan fine from another machine, then we have to look at the machine you were initially scanning from.
eric
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|
Printable Version
