Any IDS/IPS or firewall in between your target and the scanner?
Sanjeev
All work and no play makes Jack a dull boy --- Jack Torrance, The Shining
----- Original Message -----
From: "John S. Gaythorpe" <jsg@metrocast.net>
To: <nessus@list.nessus.org>
Sent: Saturday, April 22, 2006 8:09 AM
Subject: RE: Inconsistent scan results using 3.0.2
Two scans of the same host, first one came up clean... interesting as
it is a web server,
ran it again and now showed all the ports that should have been shown
in the first one.
Now the first time I entered two addresses: addr1, addr2
The first machine reported all the holes, while the second one in
question did not.
The second scan of the system in question was scanned just by itself
and reported correctly.
George wrote:
Are addr1 and addr2 on the same physical machine by any chance? If not,
this sort of behaviour is suggestive of resource >contention
issues.
Are you aware of any when you were running the first set of scans? Is the
behaviour repeatable? And >lastly, what does the nessusd.messages
log tell you about the first scan of addr2?
No they are two different machines. Resources do not seem to be an issue.
Systems were not that busy and the local scanner normally scans up to five
or more systems at one time. I have not tried to repeat it yet, but will
do
early next week. I will save the log file just in case. Looking at the log
file I cannot find anything out of the normal except for the timing which
suggests that it did not scan properly. If you want it I will forward it.
I
have not ruled out "some weird" network issue. We will continue to examine
on this end.
Thank you for the response.
John.
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
