-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Ron Gula wrote: > Ondrej Holecek wrote: >> hello, >> >> we are using nessus with two users, one for automatic scanning our >> network in infinite loop, and second for scanns "on demand" >> >> is there any possibility to give the second user higher priority? i mean >> somehow "pause" first queue if there are waiting scanns from second user? > > It depends what you are trying to prevent. > > If you don't want two or more scans occurring at the same time to > minimize packets on your network, Nessus does not have a way to remotely > pause a scan or automatically pause an ongoing scan when a new scan job > comes along. > thats not a problem > If you want the ad hoc scans to get full resources when their scans are > submitted you could use two scanners. Also, upgrading your system with > more memory or CPU will make your scans faster. And if you are on Nessus > 2 for some reason, moving to Nessus 3 will also make your scans go much > faster on the same hardware platform. > problem is, that one scan job (ie. run one instance of nessus with 10 ip) lasts from half an hour to one hour, and "on demand" scans have to wait (in the worst case) 30-60 minutes to start, and another 30-60 minutes to scan. [ I can use only one computer for this :( ] - - interesting is, that it doesnt matter if it scans 10 IPs or 20. - - now I have noticed, if any IP has "drop" on all ports, scan last one hour i dont know if it is a hw problem (we use nessus3 on amd athlon xp 1800+, 1GB ram), most of the time cpu is 50% idle (maximal cpu usage is about: 63.0%us, 9.0%sy, 2.0%ni, 21.0%id, 0.0%wa, 0.0%hi, 5.0%si, 0.0%st), maybe 100 Mbit/s network card? (but peak during tests is 1.9 Mbit, scanning 5 hosts) next strange thing is this: [Sat May 12 21:51:22 2007][6440] connection from 127.0.0.1 [Sat May 12 21:51:22 2007][13866] Client requested protocol version 12. [Sat May 12 21:51:22 2007][13866] successful login of nessusak from 127.0.0.1 [Sat May 12 21:52:31 2007][13866] Redirecting debugging output to /opt/nessus/var/nessus/logs/nessusd.dump [Sat May 12 21:52:32 2007][13866] user nessusak starts a new scan. ... notice the 1 minute and 9 seconds delay between logging in and starting scan, (during this time nessus has 100% of CPU) it can be because we have all default tests turned on, but optimize_test is "yes", so not all tests are used, am I right? (we have very mixed network of about 4000 computers, windows, linux, bsd, etc, thats why I turned all tests on) oHo -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQEVAwUBRkYiB7+9cGMV5qZXAQIORQf+JdIjMkzFfH5DOhVGClngAGUTPE8ix6PM 82P8CPhSENrn5/XbigeR6lrycrVZAReG/K3lWJ9EhX51T1KBhXToRvgtxYDOm2lN 8gaPWC3TQxwRZuwEsfj46gj+QfGTop7XJDULFZooh6KdZdPinf6xwMTf9n+XB1Hx XTgMH4y9EKF7bVLeLNVbJUNkWsLP2vqzbta58GSffroFsOCzfi/C9JiHcAXK0Zlp p3ebE6TFZhHZ/PnuVYQciuw8qVx8qBGZq1cFQr1sosYKDPgo7igjxhmZjsuLQ5ad VQ/s3JhlkpIep0lWKjtp969MizB2CDguyWUWc3WNIwkpZ7WQDh/eiw== =Bg8i -----END PGP SIGNATURE----- _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
