----- Original Message ----- From: "Hugh Brown" <[EMAIL PROTECTED]> To: "'Michael Scheidell'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Thursday, December 27, 2001 1:07 PM Subject: RE: Anyone run nessus on a large (500 host) network?
> I've been using only stable versions on my scans. 1.0.9 is the current > one I'm using. I haven't monkeyed with the libpcap...only set my > library path to /usr/local/lib. It's been one of those thing's I've I am assuming that the problem with 1.09 is the solaris libpcap. Probly something yo don't want to mess with I think that nessus 1.10 is a maintance release (isn't it 'stable'? now?) I do know that in 1.11 they have replaced the libpcap with a newer version. (old one just 'sat' there waiting for next new-england day) > One other thing that I've noticed is that the scans in general seem to > take longer under Solaris than they do under Linux. I also had a > problem with ip's that were not active...Nessus will actually try to run I think you need to enable 'optimize the test' and 'ping' and if you use icmp pings, do only 1 retry (for internal network) Also, watch for size of nmap scans (default 1-15000) might try 'fast' scan with udp scans enabled. -- Michael Scheidell Secnap Network Security, LLC [EMAIL PROTECTED] 1+(561) 368-9561 See updated IT Security News at http://www.fdma.com/
