I find it extremely unlikely that you could scan ports 1-15000 with all of those methods (particularly UDP) in a matter of 5-10 minutes. Methinks you are doing something very different from the commandline than is being done by nessus.
On Wed, 28 August 2002, "John Hines" wrote: > > Thanks for all the responses. I'm scanning the default > port range of 1 - > 15000. Under Port Scanner I have tcp connect() scan > and Nmap checked. > Under prefs I am doing both an ICMP and TCP ping and > have the Number of > retries (ICMP) = 3. Still in Prefs. tab under Nmap: > and TCP scanning > techniques I have connect() selected, in addition to > UDP port scan, and > Identify the remote host. My scanning box is behind an > OpenBSD firewall, > but as I said before when just using Nmap I have no > issues. The remote host > I was scanning was a Linksys Router which may be one of > the reasons for the > slowness, but the Nmap portion of the nessus scan took > over 3 hours and > scanning it via nmap command line took only 5 - 10 min. > > To follow up on other questions the scanning host is > Red Hat 7.3. > > Michael Schmitt <[EMAIL PROTECTED]> writes: > > > By the way: I have seen that there are two wrapper > plugins for nikto > > and whisker. Are these tools included in Nessus > > Do I need to install nikto and whisker? Does Nessus > require these tools? > If so I didn't see them listed in the documentation. > > Best Regards, > > John Hines > > > > ----- Original Message ----- > From: "Michel Arboi" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Wednesday, August 28, 2002 3:05 AM > Subject: Re: nmap taking forever > > > > "John Hines" <[EMAIL PROTECTED]> writes: > > > > > I've been unable to find a way to speed up the > initial nmap scan. I > > > usually run the tcp connect udp scan, and OS > fingerprinting. When I > > > scan external IP's to my network the nmap scans > often go on for hours. > > > However from command line I can scan the hosts with > both the tcp and > > > udp scans in just a matter of minuets. > > > > What port range do you set in the last case? > > > <a href="http://mail.cybersecret.com//jump/http://michel.arboi.free.fr/UKUSA/secu/nessus_slow_scan.html";>http://michel.arboi.free.fr/UKUSA/secu/nessus_slow_scan.html</a> > > - > > [EMAIL PROTECTED]: general discussions about > Nessus. > > * To unsubscribe, send a mail to > [EMAIL PROTECTED] with > > "unsubscribe nessus" in the body. > > > > > - > [EMAIL PROTECTED]: general discussions about > Nessus. > * To unsubscribe, send a mail to > [EMAIL PROTECTED] with > "unsubscribe nessus" in the body. --------------------------------------- Benjamin Tomhave [EMAIL PROTECTED] http://falcon.cybersecret.com/ - [EMAIL PROTECTED]: general discussions about Nessus. * To unsubscribe, send a mail to [EMAIL PROTECTED] with "unsubscribe nessus" in the body.
