These are the ping related lines in my conf. file: Ping the remote host[entry]:TCP ping destination port(s) : = 21;22;23;25;53;79;80;110;111;113;119;135;139;143;264;265;389;443;444;445;636;993;995;1433;1454;1494;1720;1723;3128;3306;3389;5001;7100;7200;7409;8080;8000;9080;10060;10080 Ping the remote host[checkbox]:Log live hosts in the report = no Ping the remote host[checkbox]:Do an applicative UDP ping (DNS,RPC...) = no Ping the remote host[entry]:Number of retries (ICMP) : = 6 Ping the remote host[checkbox]:Do an ARP ping = yes Ping the remote host[checkbox]:Do a TCP ping = yes Ping the remote host[checkbox]:Do an ICMP ping = yes Ping the remote host[checkbox]:Make the dead hosts appear in the report = yes
Renaud Deraison wrote: > > On Jan 17, 2007, at 7:23 PM, Federico Petronio wrote: > >> Hello list, >> >> I would like to ask about a behavior I found in Nessus and that I am not >> sure if it is the expected. >> >> I am running Nessus 3.0.4 over Linux Debian 3.1 (Sarge) and setup two >> different scans, (1) with a target in the same network that the Nessus >> engine and the other (2) with the target in a different network. Both >> target IPs are not in use, so Nessus will get no answer at all from any >> of them. >> >> After running the scans and getting the results in XML format I found >> that the <results></results> section is completely empty for scan (2) >> but for the scan (1) I get: >> [...] >> >> Do you know why the difference? I guess it has to be with the fact that >> the result for pinging both host is not the same: not event the ARP >> request is answered for the local host, but packets to remote host are >> directly sent to the default gateway. > > It sounds like that you configured ping_host.nasl to solely do an ARP > ping, which is only tried when the remote target is on the local LAN. > > Enable TCP/UDP/ICMP ping in ping host and try again. > > > > -- Renaud > _______________________________________________ > Nessus mailing list > [email protected] > http://mail.nessus.org/mailman/listinfo/nessus > -- Federico Petronio [EMAIL PROTECTED] _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
