Hello,
According to the description in the Policy Editor, here are the platforms :
Plat IRIX: Any version, HP-UX: Any
form version, BSD: Any version, Linux:
s: Any version, Solaris: Any
version, DG/UX: Any version,
Windows: 95, OS/2: Any version,
Windows NT: 4.0, Compaq Tru64
UNIX: Any version, Windows: Me,
Cisco IOS: Any version, SCO Unix:
Any version, Windows: 98, Novell
NetWare: Any version, Windows: 98
Second Edition, Windows 2000: Any
version, AIX: Any version, Mac
OS: Any version, Windows: XP,
Windows 2003: Any version
My win2k3 is not running any DNS service, and the nslookup command answers
quickly.
On the log file, here is occurence with zonexfer :
# Time Stamp(0x690):172.16.132.137 ZoneXferCheck: (1118744719) Tue Jun 14
12:25:19
# 172.16.132.137 zonexfer could not connect
And I see the same thing in the GUI. The next entry has its time stamp at
12h53
The entire scan takes 1h40.
Thanks.
Regards.
-------------------------------------------------
Pierre-Arnauld Lecoeuvre.
DEV/IIS/OAU/NET
Phone : +33 (0)4.97.23.09.62
-------------------------------------------------
To
Pierre-Arnauld Lecoeuvre
<[EMAIL PROTECTED]>,
[email protected]
cc
Woah Down
<[EMAIL PROTECTED]>
Subject
14/06/2005 15:17 Re: [ISSForum] : checking zonexfer
takes more than 30 minutes
Pierre-Arnauld,
I would lean to the tendency that this is somewhat normal. If your target
is a Windows 2003 machine, it is likely that this check is not expecting
what it is dealing with on that OS type. I say this because this is a UNIX
check.
The affected platforms for this check are:
IRIX: Any version, HP-UX: Any version, BSD: Any version, Linux: Any
version, Solaris
If your 2003 server is running DNS, it is possible that it is still trying
to run, but it is a check that if not screened off by Dynamic Check
Assignment, should be opted out on this target for your scan. You can run
it anyway, and the check may time out and the scan complete, but if the
check is not intended for the OS it is being run on, times can vary due to
this reason.
Take a look at you scan log for this scan parsing it for this check and see
what it is reporting back in the form of progress when this happens.
The other point to note is that although the GUI may be indicating that a
check is being run, it does not mean that the check is being run singly.
Other variables in the scan may be taking place, which can cause the
overall time to increment. How long did the entire L5 Server scan take?
Pierre-Arnauld Lecoeuvre <[EMAIL PROTECTED]> wrote:
Hello everyone,
I am scanning one server with a L5 Server policy with a Internet Scanner
7.0 SP2 (XPU level 5).
The target server is a windows 2k3.
Can anyone tell me if this is normal to have this check (zonexfer) running
more than 30 minutes ?
Thanks in advance for your help.
Regards.
-------------------------------------------------
Pierre-Arnauld Lecoeuvre.
DEV/IIS/OAU/NET
Phone : +33 (0)4.97.23.09.62
-------------------------------------------------
_______________________________________________
ISSForum mailing list
[email protected]
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to [EMAIL PROTECTED]
The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
Do you Yahoo!?
Yahoo! Mail - You care about security. So do we.
_______________________________________________
ISSForum mailing list
[email protected]
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to [EMAIL PROTECTED]
The ISSForum mailing list is hosted and managed by Internet Security Systems,
6303 Barfield Road, Atlanta, Georgia, USA 30328.
