A few days back (don't know when) one cvs version seems to have broken
interactive nmap.

on an nmap scan that should take 17 seconds: (from nmap at cli:) never
finishes if run via nessus. (i let run 30 mins, nessus just hung).
this is a nessusd problem (i suspect) since problem exists in nessus gui and
nessuswx client.
scanner# time nmap -n -P0 -sT -O --osscan_guess -r xxx.xxx.xxx.xxx
Starting nmap V. 2.54BETA34 ( www.insecure.org/nmap/ )
Interesting ports on  ():
(The 1546 ports scanned but not shown below are in state: closed)
Port       State       Service
22/tcp     open        ssh
25/tcp     open        smtp
53/tcp     open        domain
80/tcp     open        http
110/tcp    open        pop-3
113/tcp    open        auth
119/tcp    open        nntp
515/tcp    open        printer
1241/tcp   open        msg
6000/tcp   open        X11
Aggressive OS guesses: SonicWall/10 Firewall (86%)
No exact OS matches for host (If you know what OS is running on it, see
http://www.insecure.org/cgi-bin/nmap-submit.cgi).
TCP/IP fingerprint:
SInfo(V=2.54BETA34%P=i386-portbld-freebsd4.5%D=8/14%Time=3D5A65E9%O=22%C=1)
TSeq(Class=TR%IPID=I%TS=2HZ)
T1(Resp=Y%DF=Y%W=403D%ACK=S++%Flags=AS%Ops=MNWNNT)
T2(Resp=Y%DF=N%W=400%ACK=S++%Flags=AR%Ops=)
T3(Resp=Y%DF=Y%W=403D%ACK=S++%Flags=AS%Ops=MNWNNT)
T4(Resp=Y%DF=N%W=400%ACK=S++%Flags=AR%Ops=)
T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T6(Resp=Y%DF=N%W=400%ACK=S++%Flags=AR%Ops=)
T7(Resp=Y%DF=N%W=400%ACK=S++%Flags=AR%Ops=)
PU(Resp=Y%DF=N%TOS=0%IPLEN=38%RIPTL=148%RID=F%RIPCK=F%UCK=F%ULEN=134%DAT=E)
Uptime 0.001 days (since Wed Aug 14 10:12:56 2002)
Nmap run completed -- 1 IP address (1 host up) scanned in 17 seconds
0.195u 0.195s 0:17.44 2.1%      254+13286k 0+0io 0pf+0w

via nessus:
[Wed Aug 14 09:51:42 2002][1801] Executing on opentty() slave fd 12: execvp
(nmap, nmap, -n, -P0, -sT, -O, --osscan_guess, -r, 207.18.92.26).
[Wed Aug 14 10:12:05 2002][1792] stopping the whole test (requested by
client)

Michael Scheidell
SECNAP Network Security, LLC
Sales: 866-SECNAPNET / (1-866-732-6276)
Main: 561-368-9561 / www.secnap.net


-
[EMAIL PROTECTED]: general discussions about Nessus.
* To unsubscribe, send a mail to [EMAIL PROTECTED] with
"unsubscribe nessus" in the body.

Reply via email to