On Tue, Jul 18, 2006 at 08:12:21AM -0500, Scott Pate wrote:
I am not sure if this problem is new to the 3.x version, as I don't
remember having it in the past, but I have recently been forced to use
the GUI for running nessus, as I don't seem to get consistent results by
editing .nessurc and running in batch mode (which I would very much
prefer to do)
I'm running nessus 3.0.1 on Fedora core 4 using NessusClient,
...
After some
investigation, I learned that 'ping_host' seems to have no effect, and
it is the actual plugin in the .nessurc file which determines whether
the host is ping'd.
Yes, ping_hosts is a deprecated feature of NessusClient.
Ping the remote host[entry]:TCP ping destination port(s) : = 1-3000
Ping the remote host[checkbox]:Do a TCP ping = no
11219 = yes
nessus scans the port range 1-3000.
This is probably because you're implicitly enabling #10180
(ping_host.nasl) through the #11219 (the SYN Scan plugin).
Also, note that the port(s) to TCP ping (as opposed to the port range to
scan) should be specified either as a series, with semicolons separating
the actual numbers, or the word "built-in" or "extended".
Ping the remote host[entry]:TCP ping destination port(s) : = 1-3000
Ping the remote host[checkbox]:Do a TCP ping = yes
11219 = no
only first digit is recognized in port range (port 1)
Do you have other port scanners enabled? Also, the port range is
specified incorrectly (see above).
Ping the remote host[checkbox]:Do a TCP ping = no
10180 = yes
11219 = no
ping_host.nasl runs, and then plugins start to run as well, even though
there was no response from ping.
ping_host.nasl runs because you've enabled it explicitly. I'm not sure
what the settings for the other ping-related options are, or even that
of unscanned_closed.
I there
documentation on the sections of the config file, and the implications
of the settings contained within
Have you seen the Nessus Knowledge Base that edgeos maintains? It's at:
http://www.edgeos.com/nessuskb/
George
--
theall@tenablesecurity.com
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
