Hello List,

It seems that if I have the "Ping the remote host" active in the port scanning 
configuration, Nessus reports that many (>50%) of my hosts are "dead."  
However, if I shut off auto-enable dependencies, I can run nmap, SYN, etc. 
scans without problems.  I see that most of the scans requre ping_host.nasl, 
so I'm not sure what the effect of disabling pings would be.  I'm assuming 
Nessus would launch attacks against non-existing hosts without ping 
capability.  I certainly don't want that!

Is there anything I can do to fix this issue?  I've tried different settings 
for pings including ICMP pings only and it makes no difference.  If host 
pinging is enabled, I get many "dead hosts."

I'm running Nessus 2.0.7 on SuSE 9.0.  Most of the hosts I'm testing are 
Win2K.  I've included a log snippet below.

Thanks,

Craig

-------------------------

[Thu Mar 18 17:46:42 2004][2727] connection from 127.0.0.1
[Thu Mar 18 17:46:42 2004][2765] Client requested protocol version 12.
[Thu Mar 18 17:46:42 2004][2765] successful login of xxxx from 127.0.0.1
[Thu Mar 18 17:46:54 2004][2765] Redirecting debugging output to 
/var/lib/nessu
[Thu Mar 18 17:47:26 2004][2765] user xxxx starts a new attack. Target(s) :
[Thu Mar 18 17:47:26 2004][2765] user xxxx : testing 10.3.0.119 (10.3.0.119
[Thu Mar 18 17:47:26 2004][2766] user xxxx : launching ping_host.nasl again
[Thu Mar 18 17:47:32 2004][2766] ping_host.nasl (process 2767) finished its 
job
[Thu Mar 18 17:47:32 2004][2766] user xxxx : launching nmap_tcp_connect.nes
[Thu Mar 18 17:47:32 2004][2766] user xxxx : The remote host (10.3.0.119) is 
dea
[Thu Mar 18 17:47:32 2004][2766] Finished testing 10.3.0.119. Time : 6.10 secs
[Thu Mar 18 17:47:32 2004][2765] user xxxx : test complete


_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to