-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Ron Gula wrote:
Ondrej Holecek wrote:
hello,
we are using nessus with two users, one for automatic scanning our
network in infinite loop, and second for scanns "on demand"
is there any possibility to give the second user higher priority? i mean
somehow "pause" first queue if there are waiting scanns from second user?
It depends what you are trying to prevent.
If you don't want two or more scans occurring at the same time to
minimize packets on your network, Nessus does not have a way to remotely
pause a scan or automatically pause an ongoing scan when a new scan job
comes along.
thats not a problem
If you want the ad hoc scans to get full resources when their scans are
submitted you could use two scanners. Also, upgrading your system with
more memory or CPU will make your scans faster. And if you are on Nessus
2 for some reason, moving to Nessus 3 will also make your scans go much
faster on the same hardware platform.
problem is, that one scan job (ie. run one instance of nessus with 10
ip) lasts from half an hour to one hour, and "on demand" scans have to
wait (in the worst case) 30-60 minutes to start, and another 30-60
minutes to scan. [ I can use only one computer for this :( ]
- - interesting is, that it doesnt matter if it scans 10 IPs or 20.
- - now I have noticed, if any IP has "drop" on all ports, scan last one
hour
i dont know if it is a hw problem (we use nessus3 on amd athlon xp
1800+, 1GB ram), most of the time cpu is 50% idle (maximal cpu usage is
about: 63.0%us, 9.0%sy, 2.0%ni, 21.0%id, 0.0%wa, 0.0%hi, 5.0%si,
0.0%st), maybe 100 Mbit/s network card? (but peak during tests is 1.9
Mbit, scanning 5 hosts)
next strange thing is this:
[Sat May 12 21:51:22 2007][6440] connection from 127.0.0.1
[Sat May 12 21:51:22 2007][13866] Client requested protocol version 12.
[Sat May 12 21:51:22 2007][13866] successful login of nessusak from
127.0.0.1
[Sat May 12 21:52:31 2007][13866] Redirecting debugging output to
/opt/nessus/var/nessus/logs/nessusd.dump
[Sat May 12 21:52:32 2007][13866] user nessusak starts a new scan. ...
notice the 1 minute and 9 seconds delay between logging in and starting
scan, (during this time nessus has 100% of CPU)
it can be because we have all default tests turned on, but optimize_test
is "yes", so not all tests are used, am I right?
(we have very mixed network of about 4000 computers, windows, linux,
bsd, etc, thats why I turned all tests on)
oHo
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iQEVAwUBRkYiB7+9cGMV5qZXAQIORQf+JdIjMkzFfH5DOhVGClngAGUTPE8ix6PM
82P8CPhSENrn5/XbigeR6lrycrVZAReG/K3lWJ9EhX51T1KBhXToRvgtxYDOm2lN
8gaPWC3TQxwRZuwEsfj46gj+QfGTop7XJDULFZooh6KdZdPinf6xwMTf9n+XB1Hx
XTgMH4y9EKF7bVLeLNVbJUNkWsLP2vqzbta58GSffroFsOCzfi/C9JiHcAXK0Zlp
p3ebE6TFZhHZ/PnuVYQciuw8qVx8qBGZq1cFQr1sosYKDPgo7igjxhmZjsuLQ5ad
VQ/s3JhlkpIep0lWKjtp969MizB2CDguyWUWc3WNIwkpZ7WQDh/eiw==
=Bg8i
-----END PGP SIGNATURE-----
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
