Michael, I have never been able to get a large scan like that to complete. I always get the core dump/hung process routine so I haven't tried in a while, but I get the same results you do. I run it on an Ultra 10 Solaris 8 box so hardware shouldn't be an issue. I've taken to limiting my scans to 1 subnet at a time and running them with cron or by hand. I use nmap to generate a list of "active" hosts, chop it up with VI and feed that into nessus.
Hugh Hugh Brown Computer Support Group National High Magnetic Field Laboratory 1800 East Paul Dirac Drive Tallahassee, Florida 32310 850-644-3980 [EMAIL PROTECTED] -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Michael Scheidell Sent: Thursday, December 27, 2001 11:23 AM To: [EMAIL PROTECTED] Subject: Anyone run nessus on a large (500 host) network? I am wondering if anyone has run nessus on large networks, where you ran a concurrent scan on a network with 500 active hosts (one scan, not multiple scans) Can you tell me if it completed? in /var/log/messages, how many times did nmap core dump? The reason I ask, is on FREEBSD 4.3, on nessus 1.09, I got lots of core dumps on plugins, nmap and nessusd. Also, it seems to 'go to sleep' and not finish (I suspect the broken libpcap, which is fixed in 1.11) On 1.11, less (almost no) core dumps, but it will panic and crash FBSD 4.3-RELEASE and 4.4 Release. kernel dumps seems to indicate something in the vm section. So, anyone run ONE scan on 500+ ACTIVE hosts? - Michael Scheidell Secnap Network Security, LLC [EMAIL PROTECTED] 1+(561) 368-9561 See updated IT Security News at http://www.fdma.com/
