Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Nessus-Users
[Top] [All Lists]

Re: Verifying latest plugins

Subject: Re: Verifying latest plugins
Date: Tue, 18 Mar 2008 09:17:13 -0400
Ron Gula wrote:
Doug V wrote:
Hello Ron,

 Doug V wrote:
I am using Fedora 8 with the latest non-beta versions of Nessus and the 
Nessus Client installed. I was wondering if there was a command that I 
could run to force Nessus to update its plugins or to show the date of the 
last update. When I run /opt/nessus/bin/nessus-fetch --check I do get the 
"nessus-fetch is properly configured to receive a Registered feed" 
response, and in nessusd.conf the auto_update option is set to "yes", but 
I would like to verify myself that the latest plugins are installed.
rgula at tenablesecurity wrote:
If you are on Linux, you can always do an ls -lt | more while in the 
/opt/nessus/lib/nessus/plugins directory and look at the time on the last 
file. This should
give you some indication of when the last update was. 


I entered that command in that directory on Marc 17th, and almost every 
single plugin file is dated 2008-01-02. The last few files are:

-r-xr-xr-x 1 root    root     66480 2007-06-26 11:52 find_service.nes
-r-xr-xr-x 1 root    root     35648 2007-06-26 11:52 nessus_tcp_scanner.nes
-r-xr-xr-x 1 root    root      8998 2007-06-26 11:52 ssl_ciphers.nes
-r-xr-xr-x 1 root    root     16609 2007-06-26 11:52 synscan.nes
-rw-r--r-- 1 root    root     75776 2007-05-04 09:20 
compliance_check_windows_file_content.nbin

Is this normal? I have been online several times with the Nessus service 
running this month (March 2008). Shouldn't the files date from then and not 
last January and last year? It doesn't seem that the auto-update is working 
even though I registered.

How can I force an update? Thank you for your time.


Hi Doug,

One more thing -- what is in the contents of your plugin_feed_info.inc
file?

Ron Gula
Tenable Network Security


_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>