Yes, sorry, something did show up, but it did not appear significant or necessarily related. After changing report paranoia to paranoid, enabling debugging in plugin 12213, and setting the port range to 139,445, I still get no hosts reported as vulnerable. Here is what I get in nessusd.message and nessusd.dump:
============ Nessusd.dump: ============ sysctl: unknown oid 'fs.file-nr' sysctl: unknown oid 'fs.file-max' sysctl: unknown oid 'fs.file-nr' sysctl: unknown oid 'fs.file-nr' sysctl: unknown oid 'fs.file-max' sysctl: unknown oid 'fs.file-max' ============ Nessusd.message: ============== [Tue Jun 14 13:23:15 2005][49180] connection from 127.0.0.1 [Tue Jun 14 13:23:15 2005][53016] Client requested protocol version 12. [Tue Jun 14 13:23:16 2005][53016] successful login of xxxxx from 127.0.0.1 [Tue Jun 14 13:23:34 2005][53016] Redirecting debugging output to /usr/local/var/nessus/logs/nessusd.dump [Tue Jun 14 13:23:37 2005][53016] user xxxxx starts a new scan. Target(s) : xxxxxx,xxxxxx,xxxxxx, with max_hosts = 128 and max_checks = 1 [Tue Jun 14 13:23:37 2005][53016] user xxxxx : testing xxxxxx (xx.xx.xx.xx) [53031] [Tue Jun 14 13:23:37 2005][53016] user xxxxx : testing xxxxxx (xx.xx.xx.xx) [53032] [Tue Jun 14 13:23:37 2005][53016] user xxxxx : testing xxxxxx (xx.xx.xx.xx) [53034] [Tue Jun 14 13:23:37 2005][53031] user xxxxx : launching ping_host.nasl against xxxxxx [53036] [Tue Jun 14 13:23:37 2005][53032] user xxxxx : launching ping_host.nasl against xxxxxx [53037] [Tue Jun 14 13:23:37 2005][53034] user xxxxx : launching ping_host.nasl against xxxxxx [53038] [Tue Jun 14 13:23:40 2005][53031] ping_host.nasl (process 53036) finished its job in 3.415 seconds [Tue Jun 14 13:23:40 2005][53031] user xxxxx : launching ssh_settings.nasl against xxxxxx [53052] [Tue Jun 14 13:23:40 2005][53031] ssh_settings.nasl (process 53052) finished its job in 0.015 seconds [Tue Jun 14 13:23:40 2005][53031] user xxxxx : launching nessus_tcp_scanner.nes against xxxxxx [53053] [Tue Jun 14 13:23:40 2005][53032] ping_host.nasl (process 53037) finished its job in 3.425 seconds [Tue Jun 14 13:23:40 2005][53032] user xxxxx : launching ssh_settings.nasl against xxxxxx [53054] [Tue Jun 14 13:23:40 2005][53034] ping_host.nasl (process 53038) finished its job in 3.445 seconds [Tue Jun 14 13:23:40 2005][53034] user xxxxx : launching ssh_settings.nasl against xxxxxx [53056] [Tue Jun 14 13:23:40 2005][53034] ssh_settings.nasl (process 53056) finished its job in 0.022 seconds [Tue Jun 14 13:23:40 2005][53032] ssh_settings.nasl (process 53054) finished its job in 0.045 seconds [Tue Jun 14 13:23:40 2005][53034] user xxxxx : launching nessus_tcp_scanner.nes against xxxxxx [53061] [Tue Jun 14 13:23:40 2005][53032] user xxxxx : launching nessus_tcp_scanner.nes against xxxxxx [53060] [Tue Jun 14 13:23:45 2005][53031] nessus_tcp_scanner.nes (process 53053) finished its job in 5.172 seconds [Tue Jun 14 13:23:45 2005][53031] user xxxxx : launching netstat_portscan.nasl against xxxxxx [53088] [Tue Jun 14 13:23:45 2005][53031] netstat_portscan.nasl (process 53088) finished its job in 0.027 seconds [Tue Jun 14 13:23:45 2005][53031] user xxxxx : launching TLD_wildcard.nasl against xxxxxx [53089] [Tue Jun 14 13:23:45 2005][53031] TLD_wildcard.nasl (process 53089) finished its job in 0.012 seconds [Tue Jun 14 13:23:45 2005][53031] user xxxxx : launching netbios_name_get.nasl against xxxxxx [53090] [Tue Jun 14 13:23:45 2005][53034] nessus_tcp_scanner.nes (process 53061) finished its job in 5.180 seconds [Tue Jun 14 13:23:45 2005][53032] nessus_tcp_scanner.nes (process 53060) finished its job in 5.179 seconds [Tue Jun 14 13:23:46 2005][53034] user xxxxx : launching netstat_portscan.nasl against xxxxxx [53091] [Tue Jun 14 13:23:46 2005][53032] user xxxxx : launching netstat_portscan.nasl against xxxxxx [53092] [Tue Jun 14 13:23:46 2005][53031] netbios_name_get.nasl (process 53090) finished its job in 0.042 seconds [Tue Jun 14 13:23:46 2005][53031] user xxxxx : launching tcp_seq_window.nasl against xxxxxx [53093] [Tue Jun 14 13:23:46 2005][53032] netstat_portscan.nasl (process 53092) finished its job in 0.051 seconds [Tue Jun 14 13:23:46 2005][53032] user xxxxx : launching TLD_wildcard.nasl against xxxxxx [53094] [Tue Jun 14 13:23:46 2005][53034] netstat_portscan.nasl (process 53091) finished its job in 0.102 seconds [Tue Jun 14 13:23:46 2005][53032] TLD_wildcard.nasl (process 53094) finished its job in 0.015 seconds [Tue Jun 14 13:23:46 2005][53034] user xxxxx : launching TLD_wildcard.nasl against xxxxxx [53095] [Tue Jun 14 13:23:46 2005][53032] user xxxxx : launching netbios_name_get.nasl against xxxxxx [53096] [Tue Jun 14 13:23:46 2005][53034] TLD_wildcard.nasl (process 53095) finished its job in 0.015 seconds [Tue Jun 14 13:23:46 2005][53034] user xxxxx : launching netbios_name_get.nasl against xxxxxx [53097] [Tue Jun 14 13:23:46 2005][53032] netbios_name_get.nasl (process 53096) finished its job in 0.044 seconds [Tue Jun 14 13:23:46 2005][53032] user xxxxx : launching tcp_seq_window.nasl against xxxxxx [53098] [Tue Jun 14 13:23:46 2005][53034] netbios_name_get.nasl (process 53097) finished its job in 0.041 seconds [Tue Jun 14 13:23:46 2005][53034] user xxxxx : launching tcp_seq_window.nasl against xxxxxx [53099] [Tue Jun 14 13:23:47 2005][53031] tcp_seq_window.nasl (process 53093) finished its job in 1.445 seconds [Tue Jun 14 13:23:47 2005][53031] user xxxxx : launching smb_nativelanman.nasl against xxxxxx [53101] [Tue Jun 14 13:23:47 2005][53031] smb_nativelanman.nasl (process 53101) finished its job in 0.037 seconds [Tue Jun 14 13:23:47 2005][53031] user xxxxx : launching smb_kb835732.nasl against xxxxxx [53102] [Tue Jun 14 13:23:47 2005][53031] user xxxxx : Not launching smb_kb893066.nasl against xxxxxx because the key TCP/seq_window_flaw is missing (this is not an error) [Tue Jun 14 13:23:47 2005][53031] smb_kb835732.nasl (process 53102) finished its job in 0.055 seconds [Tue Jun 14 13:23:47 2005][53031] user xxxxx : launching messenger_ms03-043.nasl against xxxxxx [53103] [Tue Jun 14 13:23:47 2005][53034] tcp_seq_window.nasl (process 53099) finished its job in 1.418 seconds [Tue Jun 14 13:23:47 2005][53034] user xxxxx : launching smb_nativelanman.nasl against xxxxxx [53104] [Tue Jun 14 13:23:47 2005][53034] smb_nativelanman.nasl (process 53104) finished its job in 0.038 seconds [Tue Jun 14 13:23:47 2005][53034] user xxxxx : launching smb_kb835732.nasl against xxxxxx [53105] [Tue Jun 14 13:23:47 2005][53034] user xxxxx : Not launching smb_kb893066.nasl against xxxxxx because the key TCP/seq_window_flaw is missing (this is not an error) [Tue Jun 14 13:23:47 2005][53034] smb_kb835732.nasl (process 53105) finished its job in 0.056 seconds [Tue Jun 14 13:23:47 2005][53034] user xxxxx : launching messenger_ms03-043.nasl against xxxxxx [53106] [Tue Jun 14 13:23:53 2005][53031] messenger_ms03-043.nasl (process 53103) finished its job in 5.516 seconds [Tue Jun 14 13:23:53 2005][53031] user xxxxx : launching mssmtp_code_execution.nasl against xxxxxx [53108] [Tue Jun 14 13:23:53 2005][53031] mssmtp_code_execution.nasl (process 53108) finished its job in 0.019 seconds [Tue Jun 14 13:23:53 2005][53031] user xxxxx : launching windows_asn1_vuln_ntlm.nasl against xxxxxx [53109] [Tue Jun 14 13:23:53 2005][53031] windows_asn1_vuln_ntlm.nasl (process 53109) finished its job in 0.055 seconds [Tue Jun 14 13:23:53 2005][53031] user xxxxx : launching msnntp_code_execution.nasl against xxxxxx [53110] [Tue Jun 14 13:23:53 2005][53031] user xxxxx : Not launching mssql_litchfield_overflows.nasl against xxxxxx because the key MSSQL/UDP/Ping is missing (this is not an error) [Tue Jun 14 13:23:53 2005][53034] messenger_ms03-043.nasl (process 53106) finished its job in 5.512 seconds [Tue Jun 14 13:23:53 2005][53034] user xxxxx : launching mssmtp_code_execution.nasl against xxxxxx [53111] [Tue Jun 14 13:23:53 2005][53031] msnntp_code_execution.nasl (process 53110) finished its job in 0.042 seconds [Tue Jun 14 13:23:53 2005][53031] user xxxxx : launching msmqs_overflow.nasl against xxxxxx [53112] [Tue Jun 14 13:23:53 2005][53034] mssmtp_code_execution.nasl (process 53111) finished its job in 0.038 seconds [Tue Jun 14 13:23:53 2005][53034] user xxxxx : launching windows_asn1_vuln_ntlm.nasl against xxxxxx [53113] [Tue Jun 14 13:23:53 2005][53031] msmqs_overflow.nasl (process 53112) finished its job in 0.079 seconds [Tue Jun 14 13:23:53 2005][53031] user xxxxx : launching mssql_brute_force.nasl against xxxxxx [53114] [Tue Jun 14 13:23:53 2005][53031] mssql_brute_force.nasl (process 53114) finished its job in 0.038 seconds [Tue Jun 14 13:23:53 2005][53031] user xxxxx : launching mssql_blank_password.nasl against xxxxxx [53115] [Tue Jun 14 13:23:53 2005][53031] mssql_blank_password.nasl (process 53115) finished its job in 0.014 seconds [Tue Jun 14 13:23:53 2005][53034] windows_asn1_vuln_ntlm.nasl (process 53113) finished its job in 0.116 seconds [Tue Jun 14 13:23:53 2005][53034] user xxxxx : launching msnntp_code_execution.nasl against xxxxxx [53116] [Tue Jun 14 13:23:53 2005][53034] user xxxxx : Not launching mssql_litchfield_overflows.nasl against xxxxxx because the key MSSQL/UDP/Ping is missing (this is not an error) [Tue Jun 14 13:23:53 2005][53034] msnntp_code_execution.nasl (process 53116) finished its job in 0.042 seconds [Tue Jun 14 13:23:53 2005][53034] user xxxxx : launching msmqs_overflow.nasl against xxxxxx [53117] [Tue Jun 14 13:23:53 2005][53031] Finished testing xxxxxx. Time : 16.18 secs [Tue Jun 14 13:23:53 2005][53034] msmqs_overflow.nasl (process 53117) finished its job in 0.053 seconds [Tue Jun 14 13:23:53 2005][53034] user xxxxx : launching mssql_brute_force.nasl against xxxxxx [53118] [Tue Jun 14 13:23:53 2005][53034] mssql_brute_force.nasl (process 53118) finished its job in 0.014 seconds [Tue Jun 14 13:23:53 2005][53034] user xxxxx : launching mssql_blank_password.nasl against xxxxxx [53119] [Tue Jun 14 13:23:53 2005][53034] mssql_blank_password.nasl (process 53119) finished its job in 0.013 seconds [Tue Jun 14 13:23:53 2005][53034] Finished testing xxxxxx. Time : 16.27 secs [Tue Jun 14 13:24:02 2005][53032] tcp_seq_window.nasl (process 53098) finished its job in 15.914 seconds [Tue Jun 14 13:24:02 2005][53032] user xxxxx : launching smb_nativelanman.nasl against xxxxxx [53142] [Tue Jun 14 13:24:02 2005][53032] smb_nativelanman.nasl (process 53142) finished its job in 0.036 seconds [Tue Jun 14 13:24:02 2005][53032] user xxxxx : launching smb_kb835732.nasl against xxxxxx [53143] [Tue Jun 14 13:24:02 2005][53032] user xxxxx : Not launching smb_kb893066.nasl against xxxxxx because the key TCP/seq_window_flaw is missing (this is not an error) [Tue Jun 14 13:24:02 2005][53032] smb_kb835732.nasl (process 53143) finished its job in 0.053 seconds [Tue Jun 14 13:24:02 2005][53032] user xxxxx : launching messenger_ms03-043.nasl against xxxxxx [53144] [Tue Jun 14 13:24:07 2005][53032] messenger_ms03-043.nasl (process 53144) finished its job in 5.517 seconds [Tue Jun 14 13:24:07 2005][53032] user xxxxx : launching mssmtp_code_execution.nasl against xxxxxx [53146] [Tue Jun 14 13:24:07 2005][53032] mssmtp_code_execution.nasl (process 53146) finished its job in 0.014 seconds [Tue Jun 14 13:24:07 2005][53032] user xxxxx : launching windows_asn1_vuln_ntlm.nasl against xxxxxx [53147] [Tue Jun 14 13:24:07 2005][53032] windows_asn1_vuln_ntlm.nasl (process 53147) finished its job in 0.055 seconds [Tue Jun 14 13:24:07 2005][53032] user xxxxx : launching msnntp_code_execution.nasl against xxxxxx [53148] [Tue Jun 14 13:24:07 2005][53032] user xxxxx : Not launching mssql_litchfield_overflows.nasl against xxxxxx because the key MSSQL/UDP/Ping is missing (this is not an error) [Tue Jun 14 13:24:07 2005][53032] msnntp_code_execution.nasl (process 53148) finished its job in 0.028 seconds [Tue Jun 14 13:24:07 2005][53032] user xxxxx : launching msmqs_overflow.nasl against xxxxxx [53149] [Tue Jun 14 13:24:07 2005][53032] msmqs_overflow.nasl (process 53149) finished its job in 0.048 seconds [Tue Jun 14 13:24:07 2005][53032] user xxxxx : launching mssql_brute_force.nasl against xxxxxx [53150] [Tue Jun 14 13:24:07 2005][53032] mssql_brute_force.nasl (process 53150) finished its job in 0.014 seconds [Tue Jun 14 13:24:07 2005][53032] user xxxxx : launching mssql_blank_password.nasl against xxxxxx [53151] [Tue Jun 14 13:24:07 2005][53032] mssql_blank_password.nasl (process 53151) finished its job in 0.013 seconds [Tue Jun 14 13:24:07 2005][53032] Finished testing xxxxxx. Time : 30.66 secs [Tue Jun 14 13:24:07 2005][53016] user xxxxx : test complete [Tue Jun 14 13:24:08 2005][53016] user xxxxx : Kept alive connection [Tue Jun 14 13:24:08 2005][53016] Communication closed by client Thanks for your help! Chad -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of George A. Theall Sent: Monday, June 13, 2005 9:26 PM To: [email protected] Subject: Re: Plugins 18027 and 18028 On Fri, Jun 10, 2005 at 07:51:38PM -0000, Chad I. Uretsky wrote: > Like others, I am getting the message, "Not launching > smb_kb893066.nasl against xxxx because the key TCP/seq_window_flaw is > missing (this is not an error)" when attempting to run plugin 18028 > against a machine which I know for a fact to have the vulnerability. ... > I've turned on debugging both in the nessus.rc file (I've turned that > back off now), and in the tcp_seq_windows.nasl plugin. Nothing > unusual showed up in the nessus.dump file. Did anything show up? If so, what? > Does anyone have any thoughts one why this would happen or how to fix > it? Set report paranoia (under Global variable settings) to paranoid, enable debugging in plugin 12213 itself, set the port range to "139,445" and rerun the scan. Does this improve the result? If not, what do you see in nessusd.dump? George -- [EMAIL PROTECTED] _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
