Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Nessus-Users
[Top] [All Lists]

Re: Nessus always shows lack of information

Subject: Re: Nessus always shows lack of information
Date: Wed Mar 29 10:41:58 GMT-05:00 2006


I have a similar issue . Nessus is not able to detect tcp port 443 open on a 
Nokia firewall.
Although I can connect it to through browser or when I do a telnet on that 
destination IP using port 443. 

I am using command line nessus 3.0.2( Fedora Core 4) . 
Generated .nessusrc file by exporting the configuration from Nessus windows 
client . 
- I have disabled ping the host option 
- Default is chosen for port range 
-In port scanners only Nessus TCP scanner is enabled.

-Mudyo


On Wed, Mar 29, 2006 at 02:33:43PM +0100, andrewwhite@btinternet.com wrote:

Im using Suse 10 and the latest Nessus and NessusClient from the
website.  I normally give the NessusClient a range of IP's to scan and
it never really comes back with much info, only some ports but no
vulnerbilities.  I've been using older version of Nessus for yesrs with
no problems.  I have tried many different combinations in NessusClient
but the results are nearly always the same.  

I think first you need to identify where the problem is, and I'd start
with the configuration of your port scanner(s). Which port scanners
specifically have you tried? How do you have them configured? What port
range?

Alternatively, try running a scan against a couple of targets that you
know to have some vulnerabilities. Choose plugin #10335 (the Nessus TCP
scanner) as your scanner, "extended" as the port range, and TCP SYN
scans (unless you're behind a firewall) for the scanning technique. Does
this produce any results when you run the scan?

Btw, you may also want to think about attending one of the training
classes that Tenable is now offering:

  https://products.nessus.org/SearchResults.asp?Cat=19


George
-- 
theall@tenablesecurity.com
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus


!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+
CryptoMail provides free end-to-end message encryption.  
http://www.cryptomail.org/   Ensure your right to privacy.
Traditional email messages are not secure.  They are sent as
clear-text and thus are readable by anyone with the motivation
to acquire a copy.
!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>