When you run uptime or top, what load averages are on the system during the scan? Have you run a "ps auxw" on the system during high loads to see what is consuming resources? How many concurrent systems are you scanning? How many concurrent checks are you running? What is the port range in the port scan? Are you running ICMP or TCP in the port scan?
No single item in this list of questions will point to what is overloading the system, likely a combination that is causing the issue. As George pointed out, that's not an error message, it's a warning that Nessus has hit a threshold that indicates that the system might be running low on resources during the course of the scan and is giving you a hint to that fact. With that hint and answers to the above questions you can begin tailoring your scans to the capacity of the host running the scan. Regards, -- Dan Daniel Bowman Director of Support & ITS Tenable Network Security mailto:[EMAIL PROTECTED] http://www.tenablesecurity.com/ -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of George A. Theall Sent: Thursday, November 30, 2006 19:48 To: [email protected] Subject: Re: Connections Rejected due to high load average 98 Time On Wed, Nov 29, 2006 at 06:29:18AM -0500, jamjam wrote: > I am running Nessus 3.0.2 for Fedora Core 4 on a Pentium 4 with 500 MB > RAM and a 100Mb ethernet connection. > After scanning ~50 windows servers and workstations I found the > following system message: > > Warning!!!: Connections Rejected due to high load average 98 Time(s) > Load Avg 12: 19 Time(s) ... > Why were those connections rejected? That's not an error message from Nessus, which suggests you've got something else running on the nessusd host; eg, logwatch + sendmail. In that case, it's difficult to say what the problem is from just some log entries. Are the errors repeatable when you run a scan? Are you running scans when, say, delivering a large number of messages or messages to a large number of recipients? George -- [EMAIL PROTECTED] _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
