Yes, 1.0.10 is on my list for next week :). Also, a bleeding edge install on a linux box. I'll try that one with a large scan and see what results I get and let you know. I've tried all the optimizations and ping options...none seemed to work.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Michael Scheidell Sent: Thursday, December 27, 2001 1:12 PM To: [EMAIL PROTECTED] Subject: Re: Anyone run nessus on a large (500 host) network? ----- Original Message ----- From: "Hugh Brown" <[EMAIL PROTECTED]> To: "'Michael Scheidell'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Thursday, December 27, 2001 1:07 PM Subject: RE: Anyone run nessus on a large (500 host) network? > I've been using only stable versions on my scans. 1.0.9 is the > current one I'm using. I haven't monkeyed with the libpcap...only set > my library path to /usr/local/lib. It's been one of those thing's > I've I am assuming that the problem with 1.09 is the solaris libpcap. Probly something yo don't want to mess with I think that nessus 1.10 is a maintance release (isn't it 'stable'? now?) I do know that in 1.11 they have replaced the libpcap with a newer version. (old one just 'sat' there waiting for next new-england day) > One other thing that I've noticed is that the scans in general seem to > take longer under Solaris than they do under Linux. I also had a > problem with ip's that were not active...Nessus will actually try to > run I think you need to enable 'optimize the test' and 'ping' and if you use icmp pings, do only 1 retry (for internal network) Also, watch for size of nmap scans (default 1-15000) might try 'fast' scan with udp scans enabled. -- Michael Scheidell Secnap Network Security, LLC [EMAIL PROTECTED] 1+(561) 368-9561 See updated IT Security News at http://www.fdma.com/
