I installed NeWT 2.1.1 (i was using 2.1) originally. I also disabled Norton Anti-Virus.
Now only existing network nodes are being scanned as was to be expected. Aparently the problem was related to the anti-virus. Thanks for the help everyone provided. Long-live the Nessus list...!!! Thanks Richie > -----Original Message----- > From: Todd Adamson [mailto:[EMAIL PROTECTED] > Sent: Wednesday, June 15, 2005 2:31 PM > To: 'Michel Arboi'; 'Richie @ Firstpoint' > Cc: [email protected] > Subject: RE: Why i'm i getting unused IPs in reports as if they had > portsopen.. > > > Do you have an anti-virus software installed on this machine? > It could be set to scan outbound email and ftp connections, thus > acting as a proxy. > > Todd Adamson > [EMAIL PROTECTED] > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] Behalf Of Michel Arboi > > Sent: Wednesday, June 15, 2005 1:33 PM > > To: Richie @ Firstpoint > > Cc: [email protected] > > Subject: Re: Why i'm i getting unused IPs in reports as if they had > > portsopen.. > > > > > > On Wed Jun 15 2005 at 21:12, Richie @ Firstpoint wrote: > > > > > There is no IPS in the network. > > > > Nothing like Labrea? > > > > > The "ports" being returned for all unused IPs in the network are 21 > > > and 25. > > > > This is very strange. The ports are declared "open". This means that > > something answered with SYNACK to SYN packets. > > What happens if you telnet to those fake IPs / ports? > > > > > nothing in the network with the reported IP (checked via > > PING and port scan > > > with a port scanner such as SuperScan) > > > > If you have Nmap installed (*), could you try: > > nmap -P0 -p 21,25 -sS 192.168.0.0/24 > > > > I *insist* on the -P0 option. Or you can use -PS21,25 > > > > (*) And if you don't have nmap, it can be downloaded from > > http://download.insecure.org/nmap/dist/nmap-3.81-win32.zip > > You'll need WinPcap from http://winpcap.polito.it/ if you don't > > already have it. > > _______________________________________________ > > Nessus mailing list > > [email protected] > > http://mail.nessus.org/mailman/listinfo/nessus > > > > > _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
