TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
Tim,
I just want to add some further info on this subject. The Traceroute
function is implemented differently in UNIX and Windows based systems.
UNIX utilizes a UDP (to a seldom used port) process while Windows utilizes
ICMP (ping) packets. Thus, if you perform a traceroute from a UNIX box and
a host response is returned but a Windows Tracert or IS scan to the same
host does not detect the host or IS returns a host unreachable message then
probably the ICMP packets are being filtered at either a firewall, router,
or the host itself.
However, based on your message and your use of the word Tracert instead of
Traceroute, it appears you were using Window(s) platforms all the way. In
your message you also stated that the pings/traceroutes were successful but
some took a while. It may be that the Ping Timeout value in
IS/Tools/Options was set to low and should be increased to allow for the
slow response. An alternative is to use the Scan If Ping Fails mode as was
mentioned in one of the earlier e-mail responses. If using this mode, be
sure that the Always Run Exploits box is also checked so that the complete
scan (all vulnerabilities in the selected Policy) are checked for.
I hope this is helpful.
Dick
NASA/GSFC
At 03:29 PM 10/26/2000 -0400, you wrote:
>
>TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
>[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
>----------------------------------------------------------------------------
>
>We are trying to scan (using ISS) multiple (less than 50) hosts on our
>customer's network. We initially use PING/TRACERT to verify that we can see
>the boxes and we get good (although sometimes long) responses from them.
>When we enter the IP addresses in to ISS, and kick off the session, we get
>no errors. When we try to actually scan, we get "host unreachable" messages
>from ISS. Has anyone run in to this condition before, and are there any
>work-arounds for it? Thanks for your help.
>
>Tim Hausfeld
>Sr. Security Analyst
>SAIC
>703-610-8819
>[EMAIL PROTECTED]
>
>
>
