Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Field migration: host.id -> hw.serial_number #366

Merged

Conversation

tsellers-r7
Copy link
Contributor

@tsellers-r7 tsellers-r7 commented Jul 27, 2021

Description

This PR implements the change discussed in Issue #364.

The changes:

  • changes host.id to hw.serial_number where the value is a hardware serial number
  • changes host.id to host.name where the value references a host name
  • in each case where there is a vendor specific serial number field such as cisco.serial_number that value is duplicated in hw.serial_number and a test added for it.

Motivation and Context

The intent is to add clarity to the data that is captured. The field host.id was unclear and was being used to capture hostnames as well as serial numbers.

How Has This Been Tested?

rspec, fingerprint example captures.

Types of changes

  • Field rename

Checklist:

  • I have updated the documentation accordingly (or changes are not required).
  • I have added tests to cover my changes (or new tests are not required).
  • All new and existing tests passed.

@@ -116,7 +116,6 @@ IPReach
IPSO
IRIX
Integrated Lights Out Manager
Integrated Lights Out Manager firmware
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I rebuilt all of the identifiers/ files. Apparently this value was no longer used.

@@ -264,84 +264,3 @@ def self.best_service_match(matches)

end
end

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Out of date comment replaced by the data in the identifiers/ directory

kace:
vendor: dell
products:
k1000: kace_k1000_systems_management_appliance
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

opportunistic CPE improvement

@tsellers-r7
Copy link
Contributor Author

cc @hdm @dabdine

@tsellers-r7 tsellers-r7 merged commit 1eec3a3 into rapid7:master Jul 28, 2021
@tsellers-r7 tsellers-r7 deleted the migrate_host.id_to_hw.serial_number branch July 28, 2021 09:56
@hdm
Copy link
Contributor

hdm commented Nov 4, 2021

I agree with changing to hw.serial_number as a consistent field, but there may be some adjustment needed on the Rumble side (if not Nexpose too).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants