Thanks. I saw that site, but I was still uncertain of exactly how it worked behind the scenes. Michel Arboi indicated that all those options simply set variables that NASL scripts can check, and they don't have any other function. So, it is entirely up to the NASL script to check them, which is fine, but not what I expected. In particular, I thought that the "reduce false positives" setting might enforce a more strict tying of vulnerabilities to operating systems, such as not reporting IIS issues on Apache servers and not reporting Solaris 7 vulnerabilities on a Solaris 9 system. I haven't noticed a big problem with Nessus having these kinds of false positives, though.
>From what I can see, other than the Debian local checks which make use of the report_verbosity setting, a very small percentage of NASL scripts actually use any of these variables (around a few dozen out of 7500+ plugins) so I wouldn't expect the setting to make a big difference in the scan results unless you are having problems with one of those plugins. Am I missing something there? Have a good one. Chuck On Apr 5, 2005 9:44 PM, George A. Theall <[EMAIL PROTECTED]> wrote: > On Apr 5, 2005 4:26 PM, Chuck <[EMAIL PROTECTED]> wrote: > > > Where can I find a description of the different > > settings for Report Verbosity, Report Paranoia, and Log > > Verbosity. > > Edgeos has a description of these in its Nessus Knowledge > Base, <http://www.edgeos.com/nessuskb/>; look under "Prefs - > Global variable settings". _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
