Re: nmap 6 xm output import to Nessus

[Paul Asadoorian <paul () pauldotcom com>]

Hi Cezar,

Make sure you are using the latest nmap.nasl:

http://static.tenable.com/documentation/nmap.nasl

Some folks tested with the latest version of Nmap and it appears to be
working. Also, check out this blog post:

http://blog.tenablesecurity.com/2009/05/using-nmap-results-with-nessus-batch-scanning.html

That post is a bit dated, but speaks to some of the issues and things
you need to do to make this work correctly, essentially:

- Disable all of the port scanners and host detection in Nessus
- In the “Plugins” tab, make sure the “Port Scanners” plugin family, and
all associated plugins, are enabled
- Import the results into Nessus by going to the Preferences tab and
choosing Nmap (XML file importer).
- Once scan completes, review results (I create a filter: Filter:
“Plugin Name”, “Contains”, “nmap”).

Cheers,
Paul

On 6/22/12 12:33 PM, Cezar Spatariu Neagu wrote:
> HI Ron ....
>
> Yes is working in this way...but I have a project that concern more
> networks with more host and I was hoping to optimize the scanning using
> the nmap input file. My allocated time for scanning is restricted,
>
> Thank you ..
> Cezar
>
> On Fri, Jun 22, 2012 at 7:12 AM, Ron Gula <rgula () tenable com
> <mailto:rgula () tenable com>> wrote:
>
>     Hi there,
>
>     Could you type in the four hosts directly into Nessus and scan them
>     that way?
>
>     Ron Gula
>
>
>     On Jun 21, 2012, at 1:07 PM, Cezar Spatariu Neagu wrote:
>
>     > Hi
>     >
>     > Does anyone have problems importing nmap 6 xml output file into
>     Nessus? Looks like the parser is kind of broken and interpret also
>     xml commets and import ramdom targets like 6.0.0.0 in my case into
>     Nessus. Tenable support is not really helpfull on this one.
>     > Any Ideas....removing the comment just reduce the number of radom
>     targets...from 69000 to 600:-D . I have just 4 hosts that I really
>     want to scan.
>     >
>     > Thank you.
>     >
>     > Cezar
>     > _______________________________________________
>     > Pauldotcom mailing list
>     > Pauldotcom () mail pauldotcom com <mailto:Pauldotcom () mail pauldotcom com>
>     > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
>     > Main Web Site: http://pauldotcom.com
>
>     _______________________________________________
>     Pauldotcom mailing list
>     Pauldotcom () mail pauldotcom com <mailto:Pauldotcom () mail pauldotcom com>
>     http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
>     Main Web Site: http://pauldotcom.com
>
>
>
>
> This body part will be downloaded on demand.

-- 
Paul Asadoorian
PaulDotCom Enterprises
Web: http://pauldotcom.com
Phone: 401.829.9552
Fax: 1.877.846.2187


_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com