Access to the software recognition library

Question

Is it possible to access the software recognition library (some vendors call this a master catalogue) that is being used to generate the records stored after a device is scanned ?

I'm interested in browsing the recognition library and also to update it with specific software not already identified (e.g. Oracle middleware)

Also, where does the recognition take place ? Within the agent or within the server ?

Thanks

Answer 1

Hello, it's very simple. the agent scans the local computer for software names and transfers these software names to the central server. all the data is then stored there in a mysql database.

Answer 2

You're misunderstanding my question.

I know the agent scans the local computer, my question is, what library is the agent using to recognise the fingerprint of an particular software installation ?

Does the agent have access to a localised library of fingerprints, MD5 hashes etc or does it make a call to a server or the cloud to identify a specific piece of software ?

It is the recognition library and the associated unique attributes that are used by the agent (or server) that I wish to access.

Answer 3

can you please remove your downvote ? just for answering you a downvote should not be your first reply. that is very unfriendly.

I did not misunderstand you, if the software works the way it does, it's not my fault either

there is no library with hashes

Answer 4

done.. but your answer was wrong !

Answer 5

Why do you think my answer is wrong ?

I just answered how ocs-inventory works.

This automatically implies that the function as you want it does not exist without me explicitly mentioning it directly. Therefore, my answer is not automatically wrong, but at most my answer does not address the question in detail

Kind regards

Answer 6

>> I just answered how ocs-inventory works.
I didn't ask that question, I asked how to access the recognition library

>>This automatically implies that the function as you want it does not exist without me explicitly mentioning it directly. Therefore, my answer is not automatically wrong, but at most my answer does not address the question in detail

Exactly, your answer was the wrong one for the question I posed. Similar to if I asked "what colour is an orange" and you answered "bananas are yellow"

Answer 7

to stay with your example

your question is "how can you eat a brick ?", and i answer ..you can eat apples

Answer 8

do you really need hashes for every software ?  why the software name isn't sufficient for you ?

if you want to use hashes to identify software then you need a huge catalog of hashes like a virus scanner.
Recognition by name is usually enough and is much easier to handle.
If you really need hashes and possibly signatures, you can also solve this using scripts with OCS Inventory, but not with custom-built functions

you can program a plugin and donate that to the public

https://plugins.ocsinventory-ng.org/

but hashes are not well suited to recognize software. even from one manufacturer you have thousands of hashes otherwise. Signature names are better because they don't change so quickly

Answer 9

you still haven't told me how I can access the software recognition library ?

Answer 10

Why so toxic?

The correct and good answer should be: "There are no hashes, it uses the names/paths/whatever".