On Sat, 19 Jul 2008 14:03:48 +0000
MALTE SIMON <[EMAIL PROTECTED]> wrote:

> Hello, is ther a way to stop Nessus if a Host have more then 500 open
> Ports?

Write an ACT_GATHER_INFORMATION plugin which will declare the host dead if such 
thing happens.
Something like:

# Insert description...
ports = get_kb_list("Ports/tcp/*");
if (! isnull(ports) && max_index(ports) > 500)
{
  security_warning(port: 0, extra: max_index(ports), ' TCP ports are open\n');
  set_kb_item(name:"Host/dead", value:TRUE);
}
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to