I am having problems with Nessus using NMAP to port scan targets (ID: 10336). Specifically it does not appear to scan any targets. Both the SYN scan (11219) and the TCP Connect scan (10335) work correctly.
I am running Nessus version 2.0.12 and NMAP 3.55. Nmap is located within my $PATH and can be called directly from the command line without a problem. nmap_wrapper.nes is Version: $Revision: 1.105 $ All of my scanning occurs from the nessus command line client. As you can see below from the scan log, the nmap_wrapper.nes is finishing almost instantaneously. user xxxxx starts a new scan. Target(s) : zzz.zzz.zzz.zzz, , with max_hosts = 30 and max_checks = 25 user xxxxx : testing dns-name-ip (zzz.zzz.zzz.zzz) [12442] user xxxxx : new KB will be saved as /usr/local/var/nessus/users/xxxxx/kbs/dns-name-ip user xxxxx : launching ping_host.nasl against dns-name-ip [12443] ping_host.nasl (process 12443) finished its job in 0.010 seconds user xxxxx : launching nmap_wrapper.nes against dns-name-ip [12444] nmap_wrapper.nes (process 12444) finished its job in 0.019 seconds Any help that can be provided in troubleshooting this issue would be most appreciated. Regards, Matt ---------A portion of my scan config file for your review:----------- paranoia_level = 2 nessusd_user = xxxx trusted_ca = /usr/local/com/nessus/CA/cacert.pem nessusd_host = 127.0.0.1 begin(SCANNER_SET) 10180 = yes 10335 = no 10336 = yes 10796 = no 11219 = no 11840 = no end(SCANNER_SET) begin(SERVER_PREFS) kb_dont_replay_attacks = yes admin_user = xxxx plugin_upload = no plugin_upload_suffixes = .nasl kb_max_age = 864000 kb_dont_replay_denials = yes kb_dont_replay_info_gathering = yes Kb_dont_replay_attacks = yes kb_dont_replay_scanners = yes only_test_hosts_whose_kb_we_have = no kb_restore = no only_test_hosts_whose_kb_we_dont_have = no save_knowledge_base = yes auto_enable_dependencies = no plugins_timeout = 320 non_simult_ports = 139, 445 delay_between_tests = 1 checks_read_timeout = 15 language = english per_user_base = /usr/local/var/nessus/users report_killed_plugins = yes port_range = 1-1024 unscanned_closed = no max_hosts = 30 max_checks = 25 cgi_path = /cgi-bin:/scripts reverse_lookup = yes optimize_test = no safe_checks = yes use_mac_addr = no detached_scan = no continuous_scan = no log_whole_attack = yes slice_network_addresses = no end(SERVER_PREFS) begin(PLUGINS_PREFS) Services[entry]:Wrapped service read timeout : = 2 Services[entry]:Network read/write timeout : = 4 Services[entry]:Network connection timeout : = 4 Default accounts[entry]:Simultaneous connections : = 20 Nmap[radio]:Timing policy : = Normal Nmap[entry]:Ports scanned in parallel = 100 Nmap[entry]:Source port : = any Nmap[checkbox]:Do not randomize the order in which ports are scanned = yes Ping the remote host[checkbox]:Do a TCP ping = no Ping the remote host[checkbox]:Do an ICMP ping = yes Ping the remote host[entry]:Number of retries (ICMP) : = 10 Ping the remote host[checkbox]:Make the dead hosts appear in the report = yes Nmap[radio]:TCP scanning technique : = SYN scan Nmap[checkbox]:UDP port scan = no Nmap[checkbox]:RPC port scan = no Nmap[checkbox]:Ping the remote host = no Nmap[checkbox]:Identify the remote OS = no Nmap[checkbox]:Use hidden option to identify the remote OS = no Nmap[checkbox]:Fragment IP packets (bypasses firewalls) = no Nmap[checkbox]:Get Identd info = no Nmap[radio]:Port range = Default range (nmap-services + privileged ports) Services[entry]:Number of connections done in parallel : = 5 Global variable settings[checkbox]:Enable experimental scripts = no Global variable settings[checkbox]:Thorough tests (slow) = no Global variable settings[radio]:Report verbosity = Normal Global variable settings[radio]:Log verbosity = Normal Global variable settings[entry]:Debug level = 0 Ping the remote host[entry]:TCP ping destination port(s) : = bulit-in Ping the remote host[checkbox]:Log live hosts in the report = yes Global variable settings[radio]:Report paranoia = Normal Nmap[entry]:Data length : = Nmap[entry]:Ports scanned in parallel (max) = Nmap[entry]:Host Timeout (ms) : = Nmap[entry]:Min RTT Timeout (ms) : = Nmap[entry]:Max RTT Timeout (ms) : = Nmap[entry]:Initial RTT timeout (ms) = Nmap[entry]:Minimum wait between probes (ms) = Nmap[file]:File containing nmap's results : = end(PLUGINS_PREFS) begin(PLUGIN_SET) 10001 = no 10002 = no 10003 = no 10004 = no 10005 = no 10006 = no 10007 = no ~All plugins defined correctly~ 14244 = yes 14256 = yes 14258 = yes 14257 = yes end(PLUGIN_SET) begin(SERVER_INFO) server_info_nessusd_version = 2.0.12 server_info_libnasl_version = 2.0.12 server_info_libnessus_version = 2.0.12 server_info_thread_manager = fork server_info_os = Linux server_info_os_version = 2.4.20-8 end(SERVER_INFO) begin(RULES) end(RULES) _______________________________________________ Nessus mailing list [EMAIL PROTECTED] http://mail.nessus.org/mailman/listinfo/nessus
