Jump to content

Agent free


Recommended Posts

Sorry for all the questions. I keep running into things. But I think I'm done for the night! :)

 

Your site says your product is "agent free", but then I noticed "Copying files" & "Installing service" for a lot of PCs. On those PCs there are 2 files in the Windows dir called "tniaudit.exe" and "tniservice.exe", both files weighing in at about 1 megabyte a piece (2MB total). And every time I run scans, there are 2 of them running on each computer. Meaning I see 2 "tniaudit.exe" and 2 "tniservice.exe" running at the same time.

 

Not that I mind agents, but it's not what's advertised.

Link to comment

Feel free to ask as much as you like :)

Actually the program was developed as agent-free and it uses WMI (Windows Management Instrumentation) for accessing remote computers and collecting information. But then it happened that very often RPC service (which needs to be available to make use of WMI) is blocked by Windows Firewall in XP SP2 and Vista with default settings. Thus we have introduced a new method which drops an audit utility to a remote computer and runs a service remotely which then runs that utility locally. This method requires only SMB protocol to be allowed (file and printer sharing service), and as it's allowed more often, it's more "firewall friendly".

You can still set the program's behaviour with "File - Options - Connection - Connection method". There you can select to use either agent method (SMB) or agent-free method (RPC/DCOM). The option "Try another method", if enabled, orders the program to try to connect with another method if the one that is selected fails for some reason. If that option is disabled, only selected method is used.

As for 2 "tniaudit.exe" and 2 "tniservice.exe" running, this is okay, because this is the way our software protection system works (you can notice that one process is always very small, below 1 Mb in memory, this is a service process, and another one is bigger, this is a working process).

Link to comment
We don't have any firewalls on for individual computers. Is there some other reason it's using the agent?

No other reason. The point is that the method with agent is used by default in the furst turn, in order to maximize the number of successful scans in an unknown environment. But as I've said, you can customize this behaviour in the program's options and disable the usage of agent.

Link to comment
I switched it to "use no agent" if it can and none of the PCs have the firewall enabled, but I still see it saying "Copying files" and "Starting service". If I tell it not to try another method, then I get all kinds of RPC errors, etc.

That means that something still prevents the program to connect to the RPC service on remote computers (TCP port 135). You would need to check for that. Mostly often the Windows Firewall is the reason. Are you sure that it's disabled on those computers?

Link to comment

You should check if TCP port 135 is actually available (with telnet or some other tool).

Anyway, this is why we have introduced the scanning method which uses an agent, as one method works on some networks, another method works on other, and in any case you get the result. Though usually they both should work.

Link to comment

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...