*** Andreas Falk wrote:
 
> I am having some trouble to scan hosts that not answer to icmp.
 
Did you play with the "Do a TCP ping" and "Use ARP" options? Is nmap
installed? Which version?
 
> I cloned the full and fast and changed:
>  * Ping Host - Mark unrechable Hosts as dead (not scanning) = no
> 
> But - OID:1.3.6.1.4.1.25623.1.0.100315 still says that the host is dead.
 
Maybe you have "Report about unrechable Hosts" set to 'yes'?
 
> Shouldn't that plugin check with nmap too and see that tcp/80 is open and
> therefore not mark the host dead?
 
Yes. ping_host.nasl runs "nmap -sP" against the target. Depending on
"Do a TCP ping", "Use ARP" and "Do an ICMP ping" it add some options
to the nmap command.
 
> Openvas still ploughs through the scan, but I wonder if this is the correct
> behaviour?
 
When "Mark unrechable Hosts as dead (not scanning)" is set to 'no',
this is the expected behaviour.
 
On the same host where the scanner is running, as root:
 
nmap -sP -PE <target>                                          # Do an ICMP 
ping = yes
nmap -sP --send-ip <target>                                    # Use ARP = no
nmap -sP <target>                                              # Use ARP = yes
nmap -sP -PA21,22,23,25,53,80,135,137,139,143,443,445 <target> # Do a TCP ping 
= yes
 
Does one of the above shows the host as up?
 
Micha

-- 
Michael Meyer                            OpenPGP Key: 52A6EFA6
http://www.greenbone.net/
Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG
Osnabrück, HR B 202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
_______________________________________________
Openvas-discuss mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Reply via email to