Why Linux based device is classified in ip router class

[Karthiga Jeyara]

Linux based device is discovered in IP router class. While checking I could see that SNMP, SSH port is open in Shazzam scan, however it didn't execute the SSH classifier instead it executes the SNMP classifier. perform SSH credential test, its validated. Kindly advise

[SiD2]

Hi @Karthiga Jeyara 

Probably someone modified the classification priority to check for SNMP first otherwise OOB SSH is prioritized over SNMP.

Check the priority and revert to OOB configuration. If that was done intentional, you may consider using Behaviors in discovery schedules to target specific classes so can avoid this situation.

[Karthiga Jeyara]

I checked the classification priority. SSH-2, SNMP-3. 

[SiD2]

Hi @Karthiga Jeyara 

Ohh, so ideally it should have picked the ssh only then but not sure why.

Can you share the screenshot of ECC Queue tab sorted by date for the resp disco log?

However for time being as suggested, you can use discovery behaviors to avoid this situation.

[Jeff WelchBAE]

I thought ServiceNow discovery best practices has suggested to reverse the order of these probes in order to decrease the number of SSH credential errors in the error logs.