On Fri, 26 Apr 2002, Renaud Deraison wrote:
> On Fri, Apr 26, 2002 at 10:06:51AM +0200, Ha Nguyen wrote:
> > x.y.z.40/31 x.y.z.40-42 x.y.z.40-41
>
> /31 is not a valid netmask.
>
> > x.y.z.40/30 x.y.z.40-42 x.y.z.40-43
>
> This is right, however the last address of a network is considered as
> being the broadcast address -something you usually don't want to scan.
> Hence Nessus always skip the last address.
If you skip the broadcast part you should also skip the network part.
However the fact that one does use a /29 netmask in nessus does not mean
that it is the netmask of the targets. So skipping addresses based on an
assumption is incorrect.
I would suggest you scan them all. Scanning networks also results in
duplicate findings. It is the user of nessus that need to use his/her head
in interpreting the findings.
Hugo.
--
All email send to me is bound to the rules described on my homepage.
[EMAIL PROTECTED] http://hvdkooij.xs4all.nl/
Don't meddle in the affairs of sysadmins,
for they are subtle and quick to anger.
