Hello all, Well, I'm running nmap connect().... the problem is with syn scans?
The output of the test script is: 09:15:38.100481 localhost.search-agent > localhost.http: S [bad tcp cksum fe80!] 3868:3868(0) win 512 [tos 0x8] (ttl 255, id 47626, len 40, bad cksum 80f6!) Hmmm bad checksum... /Troels -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Paul Johnston Sent: Thursday, February 19, 2004 4:56 PM Cc: [EMAIL PROTECTED] Subject: Re: errors in installation Hi Troels, What type of port scan are you using? I suspect that you may indeed have the problem but not notice it because you're using a CONNECT() port scan. Could you run the attached NASL script on your SuSE box, and capture the packet using "tcpdump -v" ? That will verify the checksum. On my SuSE 9.0 system it is invalid, and this is due to a kernel bug. The only solution is to fix the kernel bug (i.e. use a different kernel) or put a workaround in Nessus. A version of nmap with such a workaround already exists. I would be very interested to see the results. Regards, Paul Troels Larsen wrote: >Uhm, > >I'm running Nessus on SuSE 9.0.... no problems... no special kernel.. > >The only issue I had was the SuSE RPM's (which punted on pings) >I switched to the nessus installer.. no problems > >I just installed all the nessesary prerequisites, and I believe I linked >gtk-config to /bin > >Everything works fine > >/Troels > > > -- Paul Johnston Internet Security Specialist Westpoint Limited Albion Wharf, 19 Albion Street, Manchester, M1 5LN England Tel: +44 (0)161 237 1028 Fax: +44 (0)161 237 1031 email: [EMAIL PROTECTED] web: www.westpoint.ltd.uk *********************************************************************************** Alle priser oplyst af DCE Group A/S er excl. moms & fragt, medmindre andet er angivet. Der tages forbehold for kurssvingninger og udsolgte varer. *********************************************************************************** _______________________________________________ Nessus mailing list [EMAIL PROTECTED] http://mail.nessus.org/mailman/listinfo/nessus
