I've found some issues running the beta of Nessus 3 on OS X Server
10.4.6.
1. After installation, Nessus by default only listens on 127.0.0.1.
The place that this is governed on at startup is
/Library/LaunchDaemons/com.tenablesecurity.nessusd.plist
Which contains
<array>
<string>/Library/Nessus/run/sbin/nessusd</string>
<string>-a 127.0.0.1 </string>
</array>
If you want to connect from a remote machine, you'll need to change
this to your nessusd server's real IP address. It would be good to
have this documented.
2. Once installed, using the default scan policy from the Nessus
client, I am unable to scan any hosts and get any report data back.
Tailing the nessusd.messages file in
/Library/Nessus/run/var/nessus/logs
I see output like the following, when I attempt to scan a single
host. This host is definitely up.
[Thu May 4 16:36:28 2006][568] user tarkin starts a new scan. Target
(s) : monitor.mcn.org, with max_hosts = 5 and max_checks = 5
[Thu May 4 16:36:28 2006][568] user tarkin : testing monitor.mcn.org
(216.150.240.18) [860]
[Thu May 4 16:36:28 2006][860] user tarkin : launching
ssh_settings.nasl against monitor.mcn.org [1]
[Thu May 4 16:36:28 2006][860] ssh_settings.nasl (process 1)
finished its job in 0.005 seconds
[Thu May 4 16:36:28 2006][860] user tarkin : launching
snmp_settings.nasl against monitor.mcn.org [2]
[Thu May 4 16:36:28 2006][860] snmp_settings.nasl (process 2)
finished its job in 0.014 seconds
[Thu May 4 16:36:28 2006][860] user tarkin : launching
ping_host.nasl against monitor.mcn.org [3]
[Thu May 4 16:36:28 2006][860] ping_host.nasl (process 3) finished
its job in 0.007 seconds
[Thu May 4 16:36:28 2006][860] user tarkin : launching
dont_print_on_printers.nasl against monitor.mcn.org [4]
[Thu May 4 16:36:28 2006][860] user tarkin : The remote host
(monitor.mcn.org) is dead
[Thu May 4 16:36:29 2006][860] Finished testing monitor.mcn.org.
Time : 0.10 secs
[Thu May 4 16:36:29 2006][568] user tarkin : test complete
[Thu May 4 16:36:29 2006][568] Total time to scan all hosts : 1 seconds
[Thu May 4 16:36:29 2006][568] user tarkin : Kept alive connection
There is a nessusd.dump in the above logs directory, and all it
contains is this over and over:
iface_get_mask(en0) failed
Any suggestions?
--
Roger J. Weeks
Systems & Network Administrator
Mendocino Community Network
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
