I know that because of network stack similarities (as in they appear identical) Nessus cannot parse out W98/95 hosts from NT4 and such. The problem is that we can't build reports off the data that currently comes back from the nasl that show us a breakdown of OSes that are deployed across the enterprise.
Here's my idea: Add in a condition that says if the check meets none of these sigs, return "unknown" and the fingerprint, we can submit tons of fingerprints to Tennable which can then be used to improve the nasl. Make a fingerprint submission page on your site and we can fill it up all the live long day. Are you heading in this direction? Anyway, thoughts, concerns, flames...all are welcome. :-) Sonny Discini, Senior Network Security Engineer Department of Technology Services Enterprise Infrastructure Division Montgomery County Government _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
