On Mon, Mar 15, 2004 at 11:12:15PM -0800, Norbert Kiesel wrote: > Example: is the following sequence possible (against the same IP > address): > > 1) no404 starts > 2) no404 forks for port 80 and port 443 > 3) no404 for port 80 terminates > 4) iis_bdir starts > 5) iis_bdir forks for port 80 and port 443 > 6) iis_bdir for port 443 terminates with false positive > 7) no404 for port 443 terminates > 8) iis_bdir for port 80 terminates
No. no404 start, forks for port 80 and 443, then iis_bdir starts. Set log_whole_attack to 'yes' in your .nessusrc file, and check the timestamps - if you see iis_bdir start before no404 finishes, then a dependencie is wrong. _______________________________________________ Nessus mailing list [EMAIL PROTECTED] http://mail.nessus.org/mailman/listinfo/nessus
