Welcome, Register for free! or Login below:
EduGeek.net RSS Feeds Register FAQ Members Social Groups User Map Calendar Search Today's Posts Mark Forums Read

EduSweep Powerful script analysis and detection for your network. Keep the nasties at bay for the low, low cost of nothing!

Go Back   EduGeek.net Forums > EduGeek Projects > Projects: > EduSweep
Reply
 
LinkBack Thread Tools Search Thread Language
Old 10-04-2008, 07:06 PM   #16
 
srochford's Avatar
 
Join Date: Aug 2005
Location: London
Posts: 1,178
uk
Thanks: 1
Thanked 122 Times in 107 Posts
Rep Power: 31 srochford is a splendid one to beholdsrochford is a splendid one to beholdsrochford is a splendid one to beholdsrochford is a splendid one to beholdsrochford is a splendid one to beholdsrochford is a splendid one to behold
Default

Thanks for this - it looks really useful!

Is there a limit to the number of folders it scans? I put it on one our student servers, set it to scan for everything and set it going. It finished in 35 seconds which is good but it feels too fast (there are about 120,000 folders there) and it didn't find quite a few files which I found just by doing "dir *proxy*.url /s /a (although that took much, much longer!)
  Reply With Quote
Old 10-04-2008, 07:15 PM   #17
 
bizzel's Avatar
 
Join Date: Jul 2007
Location: Durham
Posts: 439
uk uk durham city
Thanks: 53
Thanked 78 Times in 26 Posts
Rep Power: 16 bizzel is just really nicebizzel is just really nicebizzel is just really nicebizzel is just really nicebizzel is just really nice
Send a message via Skype™ to bizzel
Default

Quote:
Originally Posted by srochford View Post
Thanks for this - it looks really useful!

Is there a limit to the number of folders it scans? I put it on one our student servers, set it to scan for everything and set it going. It finished in 35 seconds which is good but it feels too fast (there are about 120,000 folders there) and it didn't find quite a few files which I found just by doing "dir *proxy*.url /s /a (although that took much, much longer!)
I agree, it does sound too fast. There's no limit on the number of folders it can scan though, I've set it running on all 5 of our servers before now. Would it be alright if I sent you a special debug build that logs all the errors it comes across? You'd just need to drop the new .exe over the top of the existing one.

Do you have read access to all the targets and their subfolders from the account you're running it on and are you running the program locally or from a network share? One thing that would help is if you can open the log file for the scan and take a look at the number of files it has scanned during that run and compare that to the number of files that windows explorer thinks are in the target folder - they should be roughly the same.

Last edited by bizzel; 10-04-2008 at 07:21 PM..
  Reply With Quote
Old 11-04-2008, 08:56 AM   #18
 
plexer's Avatar
 
Join Date: Dec 2005
Location: Norfolk
Posts: 4,269
uk
Thanks: 30
Thanked 102 Times in 101 Posts
Rep Power: 33 plexer is a name known to allplexer is a name known to allplexer is a name known to allplexer is a name known to allplexer is a name known to allplexer is a name known to all
Default

Would it be possible to have it report how much space has been clawed back by running it i.e you've just recovered 7gb of space.

Ben
  Reply With Quote
Old 11-04-2008, 09:33 AM   #19
 
srochford's Avatar
 
Join Date: Aug 2005
Location: London
Posts: 1,178
uk
Thanks: 1
Thanked 122 Times in 107 Posts
Rep Power: 31 srochford is a splendid one to beholdsrochford is a splendid one to beholdsrochford is a splendid one to beholdsrochford is a splendid one to beholdsrochford is a splendid one to beholdsrochford is a splendid one to behold
Default

Quote:
Originally Posted by bizzel View Post
I agree, it does sound too fast. There's no limit on the number of folders it can scan though, I've set it running on all 5 of our servers before now. Would it be alright if I sent you a special debug build that logs all the errors it comes across? You'd just need to drop the new .exe over the top of the existing one.

Do you have read access to all the targets and their subfolders from the account you're running it on and are you running the program locally or from a network share? One thing that would help is if you can open the log file for the scan and take a look at the number of files it has scanned during that run and compare that to the number of files that windows explorer thinks are in the target folder - they should be roughly the same.
Top and bottom of log shown below. Last night's backup showed 118,614folders and 762,796 files.

The last user scanned is 94110531 but there are many thousands after that (we used to use IDs which started with enrolment year; now they start with 3 letters and it's not started any of those).

I was logged on as an admin user but it is possible that some folders won't be accessible to the account - will the program just end if it can't read a folder or does it move on to the next folder?

Program running locally (c:\program files(x86)\edusweep) and looking at folder d:\whome.

Happy to run a debug version etc. - thanks for your help!


#### Scan Summary ####

Scan Date: 10/04/2008 18:56:31
Files Scanned: 319784
Errors: 1
Detected Items: 10084

#### Detected Items ####
<snip>
D:\whome\94110531\avg\avg71free_362a652.exe

#### Scan Summary ####
Scan completed in 35 seconds.
  Reply With Quote
Old 11-04-2008, 10:51 AM   #20
 
bizzel's Avatar
 
Join Date: Jul 2007
Location: Durham
Posts: 439
uk uk durham city
Thanks: 53
Thanked 78 Times in 26 Posts
Rep Power: 16 bizzel is just really nicebizzel is just really nicebizzel is just really nicebizzel is just really nicebizzel is just really nice
Send a message via Skype™ to bizzel
Default

Quote:
Originally Posted by srochford View Post
Top and bottom of log shown below. Last night's backup showed 118,614folders and 762,796 files.

The last user scanned is 94110531 but there are many thousands after that (we used to use IDs which started with enrolment year; now they start with 3 letters and it's not started any of those).

I was logged on as an admin user but it is possible that some folders won't be accessible to the account - will the program just end if it can't read a folder or does it move on to the next folder?

Program running locally (c:\program files(x86)\edusweep) and looking at folder d:\whome.

Happy to run a debug version etc. - thanks for your help!


#### Scan Summary ####

Scan Date: 10/04/2008 18:56:31
Files Scanned: 319784
Errors: 1
Detected Items: 10084

#### Detected Items ####
<snip>
D:\whome\94110531\avg\avg71free_362a652.exe

#### Scan Summary ####
Scan completed in 35 seconds.
Thanks for that. It's entirely possible that a folder or section was skipped. If EduSweep encounters a folder that it can't access (system volume information, for example) it should carry on scanning the rest without issues, it's designed to be pretty resilient.

Looking at the error count of 1 suggests that a folder was skipped. Currently, only two conditions can trigger an error log: a folder that can't be accessed or a file that has been moved while the scan was checking its parent folder. If there were a large number of subfolders and files in the skipped folder, that would explain the discrepancy.

Beta 6 will have more detailed error logging, so I'll let you know when that's ready.

Quote:
Originally Posted by plexer View Post
Would it be possible to have it report how much space has been clawed back by running it i.e you've just recovered 7gb of space.

Ben
Sure thing. It shouldn't be too hard to add in.

Last edited by bizzel; 11-04-2008 at 10:55 AM..
  Reply With Quote
The Following User Says Thank You to bizzel For This Useful Post:
ninjabeaver (16-04-2008)
Old 11-04-2008, 11:06 AM   #21
 
Iosoma's Avatar
 
Join Date: Jan 2008
Posts: 4
Thanks: 0
Thanked 0 Times in 0 Posts
Rep Power: 0 Iosoma is an unknown quantity at this point
Default

Ive been looking for tool like this for a little while and it certainly does the job. Scanned all areas and found the usual suspects getting up to no good. No problems here with the proxy either.

Thanks for the hard work!
  Reply With Quote
Old 16-04-2008, 09:08 AM   #22
 
katem's Avatar
 
Join Date: Jun 2006
Location: Nottinghamshire
Posts: 103
uk uk england
Thanks: 15
Thanked 3 Times in 3 Posts
Rep Power: 6 katem is on a distinguished road
Default

Just run test on our staff area, one teacher with 493mb of video files...and they wonder why their profile takes a while to load
  Reply With Quote
Old 16-04-2008, 09:23 AM   #23
 
ninjabeaver's Avatar
 
Join Date: Jun 2005
Location: Norfolk
Posts: 626
uk uk england
Thanks: 45
Thanked 18 Times in 15 Posts
Rep Power: 12 ninjabeaver will become famous soon enough
Default

Just a thanks to Bizzel there. Hats off to you mate. Found a few gigs of music........ on the teachers accounts. A little on the students, but not alot.

Nice one!
  Reply With Quote
Old 16-04-2008, 09:31 AM   #24
 
bizzel's Avatar
 
Join Date: Jul 2007
Location: Durham
Posts: 439
uk uk durham city
Thanks: 53
Thanked 78 Times in 26 Posts
Rep Power: 16 bizzel is just really nicebizzel is just really nicebizzel is just really nicebizzel is just really nicebizzel is just really nice
Send a message via Skype™ to bizzel
Default

Always a pleasure Let me know if there's a feature you'd like to see added.
  Reply With Quote
Old 16-04-2008, 10:14 AM   #25
Unvalidated User
 
PatBoland's Avatar
 
Join Date: Dec 2005
Posts: 37
Thanks: 0
Thanked 0 Times in 0 Posts
Rep Power: 0 PatBoland is an unknown quantity at this point
Default

Thanks for this, working spot on.
  Reply With Quote
Old 05-05-2008, 11:57 PM   #26
 
bizzel's Avatar
 
Join Date: Jul 2007
Location: Durham
Posts: 439
uk uk durham city
Thanks: 53
Thanked 78 Times in 26 Posts
Rep Power: 16 bizzel is just really nicebizzel is just really nicebizzel is just really nicebizzel is just really nicebizzel is just really nice
Send a message via Skype™ to bizzel
Default

Quote:
Originally Posted by srochford View Post
It didn't find quite a few files which I found just by doing "dir *proxy*.url /s /a (although that took much, much longer!)
This is now fixed in Beta 6, which will be done any day now. The scan engine was designed to continue after errors but it didn't handle a specific type of file error correctly and silently skipped the rest of the targets! At least that's what betas are for. :P
  Reply With Quote
Old 06-05-2008, 10:40 AM   #27
 
Extro's Avatar
 
Join Date: Apr 2008
Location: Birmingham, England
Posts: 1
uk uk england
Thanks: 1
Thanked 0 Times in 0 Posts
Rep Power: 0 Extro is an unknown quantity at this point
Default

I used it today for the first time, and i'd just like to thank you for this awesome piece of kit!
I found some quite interesting things, nothing harmful but a funny video or two of some teachers :P

I also found a virus.zip in a recent documents folder which came form a floppy drive, however it was on a shared teacher account (teacher1) so atm i'm not sure who the culprit is. Going to have to look out for somebody with a floppy disk
  Reply With Quote
Reply

Register now for FREE and post messages!


Username: Password: Confirm Password: E-Mail: Confirm E-Mail:
Birthday:      
Image Verification
  I agree to forum rules 


Tags
edusweep


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools Search Thread
Search Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


All times are GMT +1. The time now is 01:23 AM.
Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 ©2008, Crawlability, Inc.
Copyright EduGeek.net