Open TCPIP ports discovery

Hello, to support a conformance requirement we need to discover all accessible ports on servers.

Either these ports are LISTENING or ESTABLISHED and configured ate the local firewall.

I understand that the TCP Data by Shell/SNMP jobs executes the necessary netstat#lsof commands to retrieve that info but it is not reported as CI in uCMDB; it is kept at the Probe level.

Any recommandation as to use the "raw" tcpip port data to create objects in uCMDB?

What about discovering firewall rules? Anybody has ever done some discovery script for that?


Thanks in advance,