in

eEye Digital Security

The endpoint to vulnerability starts here.

 

Discrepancy between NetBIOS and DNS names on Retina scan.

Last post 05-13-2009 5:42 AM by Blue1978. 4 replies.
Page 1 of 1 (5 items)
Sort Posts: Previous Next
  • 05-12-2009 11:24 AM

    • stabet
    • Top 500 Contributor
    • Joined on 05-12-2009
    • Posts 2

    Discrepancy between NetBIOS and DNS names on Retina scan.

    Does Retina perform a DNS query to determine the NetBIOS and DNS names of the systems it scans? The results of a Retina scan vulnerability export report listed one name as the NetBIOS name for the scanned system, but a different name for the DNS name, on the same row in the csv file. After logging into the system, we determined that the NetBIOS name was correct. A little research showed DNS PTR records for the pertinent IP address for both the correct (NetBIOS) name and the incorrect (DNS) name. If Retina doesn't get this information from a DNS query, where does it get it from?

    I realize this may not be directly related to Blink, but I couldn't find another Retina forum elsewhere. Thanks.

  • 05-12-2009 6:20 PM In reply to

    Re: Discrepancy between NetBIOS and DNS names on Retina scan.

         I am not completely sure myself, but, if you do not get an answer in here in a timely fashion (and your using Blink Professional or the regular Retina scanning software package) you are entitled to personal support via the Customer Support Portal located here:

    https://www.eeye.com/clients/login.html?access=0&target=&rnd=090512.181942.031014.231

    Filed under:
  • 05-12-2009 9:17 PM In reply to

    • bpatten
    • Top 10 Contributor
    • Joined on 09-24-2007
    • Irvine, CA
    • Posts 125

    Re: Discrepancy between NetBIOS and DNS names on Retina scan.

    As Blue1978 pointed out, you can open a support ticket and ask via Clients Portal (www.eeye.com/clients) but to answer your question, Retina is getting the machine name via Netbios and doing a reverse DNS lookup to get the DNS information, hence the discrepancy. You were right to check your DNS server and make the correction there, thats exactly how to resolve the issue. 

    Hope that helps. 

     

  • 05-13-2009 5:27 AM In reply to

    • stabet
    • Top 500 Contributor
    • Joined on 05-12-2009
    • Posts 2

    Re: Discrepancy between NetBIOS and DNS names on Retina scan.

     Excellent! Thanks to both of you for the info about DNS and the link to the client portal - I'll have to talk to our contracting overlords to find out about how to get an account for the portal.

  • 05-13-2009 5:42 AM In reply to

    Re: Discrepancy between NetBIOS and DNS names on Retina scan.

     Yes, the portal is very nice and has a very simple interface.  I have been using it now for almost a year and a half as a Blink Professional user and like it very much.  Once you log into it you have access to four areas of interest:

    1.  Product Downloads - This is where you can download some of eEye's free tools that were created in the past.  This is also where you download the current version of the software that you have a license for.

    2.  Product Licensing - Shows all of the serial numbers that you have under your account and whether they are still active or have expired.

    3.  Documentation - Pretty much explains it all.  Nice archive of pdf manuals on all of eEye's products.

    4.  Technical Support - This is where you can submit a new ticket, view pending ones, or see ones that have been closed in the past.  Through this you get to talk to two very busy guys that respond to these tickets on a daily basis (Alex and Jon).  Keep up the good work guys!

    Filed under:
Page 1 of 1 (5 items)
© 1995 - 2009 eEye Incorporated