Are you able to ping the machine from the nessus server ? And vice-versa ?
Freebsd prompt > ping machine
Machine prompt > ping Freebsd ?
2008/4/8, francesco sottini <francesco.sot@gmail.com>:
so, the situation now is different.
after have disabled the ping, now i can scan the machine.
well, i started to scan the machine in different steps and i obtain the
following final results:
with all the scanner on but not the ping one, with safe check off , with
no plugins, all the scanner on but not the ping one, Nmap with Xmas tree
scan setted, i obtain that whatever port number i scan, it is open and no
other information.
well, if i active the safe check , then i don't have result.
now i am scanning the machine with all the Non-Dos plugin on but without
safe check.
which kind of host i have in front? an IDS? an honeypot?
Thanks!
I have attached the preference for the scan without plugins:
max_hosts = 16
max_checks = 10
log_whole_attack = yes
cgi_path = /cgi-bin
port_range = 80,22,25,8080,53
optimize_test = yes
language = english
checks_read_timeout = 5
non_simult_ports = 139, 445
plugins_timeout = 320
safe_checks = no
auto_enable_dependencies = yes
use_mac_addr = no
save_knowledge_base = no
kb_restore = no
only_test_hosts_whose_kb_we_dont_have = no
only_test_hosts_whose_kb_we_have = no
kb_dont_replay_scanners = no
kb_dont_replay_info_gathering = no
kb_dont_replay_attacks = no
kb_dont_replay_denials = no
kb_max_age = 864000
plugin_upload = no
plugin_upload_suffixes = .nasl, .inc
slice_network_addresses = no
ntp_save_sessions = yes
ntp_detached_sessions = yes
server_info_nessusd_version = 2.2.6
server_info_libnasl_version = 2.2.6
server_info_libnessus_version = 2.2.6
server_info_thread_manager = fork
server_info_os = FreeBSD
server_info_os_version = 6.1-PRERELEASE
reverse_lookup = no
ntp_keep_communication_alive = yes
ntp_opt_show_end = yes
save_session = yes
detached_scan = no
continuous_scan = no
Total security holes found : 5
high severity : 0
Medium severity : 0
informational : 5
Scanned hosts:
Name High Low Info
------------------------------------------------
192.168.0.10 0 0 5
Host: 192.168.0.10
Open ports:
smtp (25/tcp)
domain (53/tcp)
http (80/tcp)
http-proxy (8080/tcp)
ssh (22/tcp)
--
Francesco S.
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
