On Tue, Mar 25, 2003 at 12:20:35PM +0200, Jukka Juslin wrote:
>
> Dear Users,
>
> Has anybody faced problem of the nessus report being flooded with repeated
> lines like here:
>
> . Information found on port loc-srv (135/tcp)
>
>
> A DCE service is listening on this host
> UUID: 378e52b0-c0a9-11cf-822d-00aa0051e40f, version 1
> Endpoint: ncalrpc[LRPC000002b8.00000001]
>
> . Information found on port loc-srv (135/tcp)
>
>
> A DCE service is listening on this host
> UUID: 1ff70682-0a51-30e8-076d-740be8cee98b, version 1
> Endpoint: ncalrpc[LRPC000002b8.00000001]
>
> The lines are not exactly identical, but I would appreciate if there is a
> way to get rid of these DCE service reports by configuring the .nessusrc?
> I didn't find any way so far.
You can disable the plugin 10736 (dcetest.nasl), but then you loose
valuable information (especially when the plugin recognizes DCE/RPC
services on ports other than 135).
> Also sometimes nessus claims a port was open and now the service is
> crashed (although safe checks were on):
>
> . Information found on port unknown (3555/tcp)
>
>
> This port was detected as being open by a port scanner but is now
> closed.
> This service might have been crashed by a port scanner or by some
> information gathering plugin
[...]
> I would just like to disable this kind of repeated information. Is that
> possible?
Disable plugin 10919. Once again, you'll loose information.
-- Renaud
