*** Andreas Falk wrote: > I am having some trouble to scan hosts that not answer to icmp. Did you play with the "Do a TCP ping" and "Use ARP" options? Is nmap installed? Which version? > I cloned the full and fast and changed: > * Ping Host - Mark unrechable Hosts as dead (not scanning) = no > > But - OID:1.3.6.1.4.1.25623.1.0.100315 still says that the host is dead. Maybe you have "Report about unrechable Hosts" set to 'yes'? > Shouldn't that plugin check with nmap too and see that tcp/80 is open and > therefore not mark the host dead? Yes. ping_host.nasl runs "nmap -sP" against the target. Depending on "Do a TCP ping", "Use ARP" and "Do an ICMP ping" it add some options to the nmap command. > Openvas still ploughs through the scan, but I wonder if this is the correct > behaviour? When "Mark unrechable Hosts as dead (not scanning)" is set to 'no', this is the expected behaviour. On the same host where the scanner is running, as root: nmap -sP -PE <target> # Do an ICMP ping = yes nmap -sP --send-ip <target> # Use ARP = no nmap -sP <target> # Use ARP = yes nmap -sP -PA21,22,23,25,53,80,135,137,139,143,443,445 <target> # Do a TCP ping = yes Does one of the above shows the host as up? Micha
-- Michael Meyer OpenPGP Key: 52A6EFA6 http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner _______________________________________________ Openvas-discuss mailing list [email protected] https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
