On 07/05/07 12:42, Doug V wrote:
On Nessus.org it says there are 15069 (registered feed) plugins, but
in the Nessus client it's showing only 14925 enabled.
The figures reported on nessus.org reflect the number of files in a
particular feed, which means they account for a number of include files
that aren't themselves plugins (66, I believe, in the registered and
direct feeds), but don't account for the C-language plugins (*.nes).
Your Nessus client doesn't report:
- plugins in the "Port Scanners" family (they have their own section
in the client).
- plugins that call an external program that can't be found in the
PATH on your Nessus server when it started. Examples may include
nikto.pl, ~25 hydra-related plugins, etc.
- plugins that make use of features not available in your version of
Nessus. Examples may include 50+ compiled plugins (*.nbin) that require
Nessus 3.x.
- plugins that are merely placeholders but have effectively been
removed from the feed; eg, badblue_directory_traversal.nasl,
sendmail_wiz.nasl, snmp_detect.nasl, etc.
My Nessus
installation is configured to get automatic plugin updates
(registered feed), and I have tried manually running
nessus-update-plugins, but I'm still only at 14925. How can I ensure
that all available plugins are installed?
plugin_feed_info.inc in the plugins directory will tell you when the
last update occurred, as will the output of plugin #19506 if you enable
it in your scans. That will at least tell you whether updates are
happening.
Assuming they are, then to track down differences for your server,
you'll probably need to grab a copy of the plugins tarball using
"nessus-fetch --plugins" and compare the number of plugins to what's
listed on nessus.org; then figure out what the differences are between
that and what your server reports is available.
On another note, ever since upgrading to v3.0.6, there is no longer a
"nessus" entry in the Background Services tab of the Service
Configuration interface (I'm running Fedora 6). Any explanation for
that?
I'll look into that. Thanks for the report.
George
--
theall@tenablesecurity.com
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
