Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Nessus-Users
[Top] [All Lists]

cannot receive full plugin feed despite registration

Subject: cannot receive full plugin feed despite registration
Date: Fri, 25 Feb 2005 16:12:11 +0100
Can someone give me some hints to what I am doing wrong here.

I've downloaded the nessus-installer-2.2.3.sh, installed it, and provided the activation code when it asked for it, all without error messages (apparently it knows how to find the http_proxy environment variable).
After the installation, because I'm on an internal LAN, with a http proxy and with a firewall, I've created a /usr/local/etc/nessus/nessus-fetch.rc
with :
proxy=myproxy.internaldomain.com
proxy_port=8080


Now when I start the nessusd for the first time, or run nessus-update-plugins I get:
======
# nessusd -D -a 127.0.0.1
Loading the plugins... 2652 (out of 6330)
You are running a version of Nessus which is not configured to receive a full plugin feed. As a result, your security audits might produce incomplete results. To obtain a full plugin feed, you need to register your Nessus scanner at the following URL :
http://www.nessus.org/register/
======
I've done the registration as part of the installation, and got no error messages, so what I am missing here.


I've also had a look at the nessus-fetch options (with a configured nessus-fetch.rc):
This one works:
# nessus-fetch --url http://www.nessus.org/index.php test.txt
The test.txt contains the requested URL.
This does not work:
# nessus-fetch --check
nessus-fetch is not configured to receive a direct plugin feed
This gives me contradicting output:
# nessus-fetch --register {my activation code}
could not connect to plugins.nessus.org - Success


I've also tried with a 2nd new registration code entering this manually and then entering the 3 location lines that came with the 2nd registration in usr/local/sbin/nessus-update-plugins (note that it did not contain the mentioned "old" three lines):
location="http://www.nessus.org/nasl/all-2.0.tar.gz";
location_md5="http://www.nessus.org/nasl/all-2.0.tar.gz.md5";
location_sig="http://www.nessus.org/nasl/all-2.0.sig";


Because this still gave me the same error messages I've also did a complete uninstall-nessus with all settings, and reinstalled everything and started over again, with new activation codes.


A second machine I tried nessus on works just fine, this machine is not on the Internal LAN but connected directly to the Internet, It does not complain about registration when running nessusd or nessus-updated-plugins, and it has 7000+ plugins.


_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>
  • cannot receive full plugin feed despite registration, oskar <=