Re: Scan uncomplete

Sun, 15 Feb 2004 15:16:48 -0800

Hi Yoni,
 
So you are definitely scanning the right machine when you run the tests? Do you get her to run ipconfig and let you know what her IP address is?
 
I am sure that there would be some tests that could force a machine to reboot - especially on a windows box - but I do not know which ones those are. You can look up what the plug ins do here:
http://cgi.nessus.org/plugins/dump.php3?family=Windows
 
One thing you should make sure you are doing is to set the tests to SAFE. If you do not have the tests set to safe, there is a strong chance that one of the tests/plugins will cause the machine to crash.
 
Have you asked her to watch the machine when the test is running? Do you know for sure that it is being restarted?
 
Hope this helps.
 
Antony

Yoni - Shocksite <[EMAIL PROTECTED]> wrote:
Hello Kava,
 
Well suggested by the good people here, my server is ONLY a Nessus server connected to ADSL directly.
 
I have set a bunch of test (not all) for windows machine like this one just connected to the net.
 
The IP is dynamic by i warn her before the test so she know she don't have to shutdown.
 
BUT... may be one of the test is forcing a restart... possible ?
 
 
Yoni
----- Original Message -----
From: Kava Kicks
Sent: Friday, February 13, 2004 7:59 AM
Subject: Re: Scan uncomplete

Also, is the server (where you are doing your scans from) ok?
 
I found that when I was running nessus with too many hosts and too many tests per host, that scans were not completing after days ... but then I was scannnig many fairly large network ranges....CPU was maxed and paging to disk was huge... I presume you are only scanning her specific IP address, but how many tests per host do you have set...
 
Another thing, are you sure her IP address is static? If she has a dynamic IP address then you could be scanning anyone ...

Yoni - Shocksite <[EMAIL PROTECTED]> wrote:
Well...
 
As i write no firewall there... :)
DSL cable, a DSL modem and XP. Nothing more
 
----- Original Message -----
From: a a
Sent: Friday, February 13, 2004 6:18 AM
Subject: Re: Scan uncomplete

It is almost certainly a smoothwall box (www.smoothwall.org) which is a firewall ...

Yoni - Shocksite <[EMAIL PROTECTED]> wrote:
Hello,

I scan regularly the Windows XP of my girlfriend from my server in a country
an ISP to her laptop in another country with another ISP. I use Nessus WX
and a set i have done to scan a simple XP unprotected.

Since 2 day the scan stay incomplete as the laptop is running fine (look
like at least). Port scan goes to 100% but test stop at 8% or 30%.

btw, the plug 11268 general TCP says:

Remote OS guess : Smoothwall Linux-based firewall 2.2.23

CVE : CAN-1999-0454

Is this a false (remember XP lone computer) or is it some firewall on the
way to the target ?



Yahoo! Greetings
Send your love online with Yahoo! Greetings - FREE!


Try the new improved Yahoo! Australia & NZ Search
_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to