Hello, I'm trying to scan a host with the default policy. The host is alive and responding to pings. I got no results when scanning with Nessus 3.2.0 (Windows). Looking at scan.log (in he "logs" dir), I can see a "remote host is dead". But my question is why? If I run nmap against the host, I can see unprivileged ports open (>1024) and of course it's responding to ping. I also entered 1-65535 in "port scanner range". No luck at all. Am I missing something? Perhaps a bug in Nessus?
Another question, how could I debug this? If I enable the option to "save a packet capture of the scan", I couldn't find any new log on logs dir (where should it be placed?) Log attached (IP stripped; I could provide it in private for testing/debugging purposes): [Mon Jun 23 20:56:43 2008][540] Use default port range [Mon Jun 23 20:56:48 2008][540] user localuser : testing X.X.X.X (X.X.X.X) [540] [Mon Jun 23 20:56:48 2008][540] Scan X.X.X.X using 21942 plugins [Mon Jun 23 20:56:48 2008][540] user localuser : launching clrtxt_proto_settings.nasl against X.X.X.X [1] [Mon Jun 23 20:56:48 2008][540] user localuser : launching dont_scan_settings.nasl against X.X.X.X [2] [Mon Jun 23 20:56:48 2008][540] user localuser : launching ssh_settings.nasl against X.X.X.X [3] [Mon Jun 23 20:56:48 2008][540] clrtxt_proto_settings.nasl (process 1) finished its job against X.X.X.X in 0.000 seconds [Mon Jun 23 20:56:48 2008][540] dont_scan_settings.nasl (process 2) finished its job against X.X.X.X in 0.000 seconds [Mon Jun 23 20:56:48 2008][540] ssh_settings.nasl (process 3) finished its job against X.X.X.X in 0.000 seconds [Mon Jun 23 20:56:48 2008][540] user localuser : launching snmp_settings.nasl against X.X.X.X [4] [Mon Jun 23 20:56:52 2008][540] snmp_settings.nasl (process 4) finished its job against X.X.X.X in 3.578 seconds [Mon Jun 23 20:56:52 2008][540] user localuser : launching ping_host.nasl against X.X.X.X [5] [Mon Jun 23 20:56:54 2008][540] ping_host.nasl (process 5) finished its job against W.W.W.W in 2.921 seconds [Mon Jun 23 20:56:54 2008][540] user localuser : launching dont_scan_printers.nasl against X.X.X.X [6] [Mon Jun 23 20:56:54 2008][540] The remote host (X.X.X.X) is dead [Mon Jun 23 20:56:54 2008][540] Finished testing X.X.X.X. Time : 6.718 secs, 6 plugins launched [Mon Jun 23 20:56:54 2008][540] 1 hosts scanned -- Saludos, -Roman PGP Fingerprint: 09BB EFCD 21ED 4E79 25FB 29E1 E47F 8A7D EAD5 6742 [Key ID: 0xEAD56742. Available at KeyServ] _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
