On Wed, Jul 23, 2003 at 10:56:32AM -0700, Mark G. Spencer wrote:
> Do the Prefs. Nmap options apply to both the internal ("plug-in"?) and
> external Nmap?
Only to the external Nmap. The "internal" nmap is just perform TCP
connect() scans.
On Wed, Jul 23, 2003 at 10:56:38AM -0700, Mark G. Spencer wrote:
> I just found some of the information I was looking for that I didn't see in
> the demo, context help, or man page:
>
> http://cgi.nessus.org/plugins/dump.php3?family=Port%20scanners
>
> I'm wondering after reading these descriptions though, will LaBrea also
> populate the Knowledge Base with dead or alive information? Is there value
Yes.
> to running this in addition to tcp connect() scan and ping remote host, or
> is it somehow redundant? What I'm getting at is trying to comprehensively
> determine if hosts are alive in my initial scan.
If you know there are LaBrea tarpits deployed on your network, it's
definitely recommended you enable this plugin. If you know there's none,
you may disable it.