On Wed, 10 Mar 2004, Michel Arboi wrote:

> - nmap_wrapper should *not* depend on ping_host, as nmap includes a
> "ping / don't ping" option
>
> - snmp_portscan is slow if the target is alive but does not answer to
> SNMP requests, so maybe we should let it run against dead hosts too?
>
> - nmap_tcp_connect and synscan should probably remain untouched with
> their dependencies on ping_host.


Although nmap_wrapper does include a ping / no ping option, this really
only passes (or omits) the "-P0" flag when nmap is called. This
manipulates ICMP ping checks, but it does not handle TCP ping checks.
Although nmap handles TCP ping, Nessus' nmap_wrapper only handles ICMP
on/off.

Thus, although not ideal, to be more robust, nmap_wrapper probably should
remain dependent on ping_host to be able to handle both ICMP and/or TCP
ping testing of the target.

~Jay

-- 
..
..  Jay Jacobson
..  Edgeos, Inc. - 480.961.5996 - http://www.edgeos.com
..
..  Managed Vulnerability Assessment
..  Services for Information Security Professionals
..

_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to