Well at least I know i'm not the only one experiencing it, :/
I checked the logs for nessus, and it maybe the problem is that the way the
client is telling the server what IPs to scan. It appears to be trying to
send a list of EVERY single IP!
[Fri Apr 22 15:17:09 2005][28014] user mercer starts a new scan. Target(s) :
10.
1.1.0,10.1.1.1,10.1.1.2,10.1.1.3,10.1.1.4,10.1.1.5,10.1.1.6,10.1.1.7,10.1.1.
8,10
.1.1.9,10.1.1.10,10.1.1.11,10.1.1.12,10.1.1.13,10.1.1.14,10.1.1.15,10.1.1.16
,10.
1.1.17,10.1.1.18,10.1.1.19,10.1.1.20,10.1.1.21,10.1.1.22,10.1.1.23,10.1.1.24
,10.
1.1.25,10.1.1.26,10.1.1.27,10.1.1.28,10.1.1.29,10.1.1.30,10.1.1.31,10.1.1.32
,10.
1.1.33,10.1.1.34,10.1.1.35,10.1.1.36,10.1.1.37,10.1.1.38,10.1.1.39,10.1.1.40
,10.
1.1.41,10.1.1.42,10.1.1.43,10.1.1.44,10.1.1.45,10.1.1.46,10.1.1.47,10.1.1.48
,10.
1.1.49,10.1.1.50,10.1.1.51,10.1.1.52,10.1.1.53,10.1.1.54,10.1.1.55,10.1.1.56
,10.
1.1.57,10.1.1.58,10.1.1.59,10.1.1.60,10.1.1.61,10.1.1.62,10.1.1.63,10.1.1.64
,10.
[etc etc]
That's just freaking INSANE. Looks like it cuts off just about after the
first Class C I was trying to scan.
-----Original Message-----
From: Alex Campoe [mailto:campoe@usf.edu]
Sent: Monday, April 25, 2005 9:22 AM
To: Mercer, Jeff
Cc: nessus@list.nessus.org
Subject: Re: Scan terminates after just one subnet (Nessus 2.2.4)
Jeff
I've had the exact same problem and posted a while back to the list,
without lock. I can't estabilish a pattern to the problem. I did
multiple installs of Nessus, multiple installs of NessusWX, ran tests
without NessusWX. Some times it would through, other times it
would not.
Very frustrating.
Alex
Mercer, Jeff wrote:
I'm trying to do a scan of a bunch of different IP ranges,
all at least full
Class C's. I'm just scanning for a couple of ports to see
if they are open,
nothing fancy.
I use NessusWX to setup the profile and initiate the scan.
Everything runs
great, except that after just the first range of addresses
are scanned, it
stops with "Test complete".
So even though I'm trying to scan 15 distinct ranges (each
being anywhere
from a /24 to a /28), it always ends after just the first class C is
scanned. I haven't had this behavior before...
Is this a known bug?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Jeff Mercer - ITS Security & BTINet Systems Administration
"This electronic message transmission contains information
from the office
of Jeff Mercer, ITC^DeltaCom, Inc., which may be
confidential or privileged.
The information is intended to be for the use of the
individual or entity
named above. If you are not the intended recipient, be
aware that any
disclosure, copying, distribution or use of the contents of
this information
is prohibited. If you have received this electronic
transmission in error,
please notify us by telephone 919-863-7257 or by electronic mail
jeff.mercer@itcdeltacom.com immediately."
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
--
-- Alex Campoe, CISSP Information Security
Manager --
-- Associate Director, Systems
--
-- Email: campoe@usf.edu Phone: (813) 974-1796
--
-- Academic Computing University of South Florida
--
--------------------------------------------------------------
---------
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
