Hi,
On Tuesday 25 April 2017 07:17 PM, Ben Langrill wrote:
Hello,
The default 'full and fast' profile is triggering Windows Event ID
4009 on a number of Windows print servers.
(https://technet.microsoft.com/en-us/library/cc773970.aspx) The event
description is a variant of: "Printer \\<Server Address>\ specified in
the request from <OpenVAS ID> does not exist: request ignored." This
event ID is unfortunately tied to an auto ticket generation workflow
so this has caused some issues.
Is there a way to determine specifically which NVT is responsible? I
don't see any obvious options or NVTs related to it but suspect is has
something to do with SMB resource enumeration.
Take a look at find_service.nasl , find_service1.nasl ,
find_service2.nasl and it's dependencies.
These are the NVTs primarily responsible for detecting servers/services.
Thanks,
Antu Sanadi
Thanks for any help!
Ben
_______________________________________________
Openvas-discuss mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
_______________________________________________
Openvas-discuss mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss