Ok, so as it appears _all_ of the OpenVAS default scanner configs use
a default scan mode of TCP Connect (connect()). I see that what I need
to do for my fast scans that are firewalled, is to 
clone an existing
scan config, alter the clone, change the TCP Scanning Technique" to SYN
then use that clone in my scans. 

I've done this with the Full and Fast
scan config, and double checked more than once, yet when I run my task
(even after restarting openvas) using my newly cloned scan config, I see
it is still passing the tcp connect flag (-sT) to nmap:
nmap -n -P0 -oG
/tmp/nmap-10.10.1.1-1598147081 -sT -sU -p T:1-5,7..... 

The only thing
that works for me is to edit the nmap.nasl file and change:
else
argv[i++] = "-sT";
to
else argv[i++] = "-sS"; 

Any help would be
appreciated.... 

ONE OTHER OFF TOPIC FEATURE REQUEST:
If someone could
move the garbage can icon as far away from the wrench icon as possible,
it would be much appreciated. It's a little like having the nuclear
missile launch button right beside the 
channel up button on your TV
remote...

Thanks, 

Ted 
 
_______________________________________________
Openvas-discuss mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Reply via email to