Re: Scanning XP SP2

On Tue Jan 24 2006 at 11:07, Nelson, C.M. wrote:

> XP SP2 systems by default have the firewall enabled and, as a result of
> having the "File and Printer Sharing" configuration checkbox unchecked,
> do not respond to ping (the MS way of doing things!)

If uPNP is still allowed, then TCP:2869 will answer with RST.
Should I add this port in the "extended" list of ping_host.nasl?

> If I do not use ping, and use Nmap to portscan it completes very quickly
> where an address does not correspond to a live host.

As Javier already said, Nmap uses "ARP ping" on the same network. But
as soon as there is a gateway between the scanner and the target,
you're dead.

> After Nmap has run, whether it scanned a live host or not, some Nessus
> plug-in tests run regardless. It seems that although Nmap completes
> quickly where there is no live host, it does not convey to Nessus that
> there is no point in running any plug-in.

Nmap is not used to determine if the host is dead or alive, just for
port scan.

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus