Re: Nessus experience

["Samir Kelekar" <samir () teknotrends com>]

----- Original Message ----- 
From: "Tate Hansen" <tate () ClearNetSec com>
> checks_read_timeout:  maximum number of seconds to wait for a probe
> response:  wait doing a recv()
> plugins_timeout:  the maximum number of seconds of lifetime for a
> vulnerability check
>
> If you set checks_read_timeout to 1 second and plugins_timeout to 5
seconds,
> you'll blaze through the scan.  The problem is you may lose accuracy
because
>
That is quite interesting.
Correct me if I am wrong, but it looks like
if the target interface that one is scanning is
blocked/down for some reasons, nessusd does not learn about it. (I guess it
might
be too much to expect). That is, every one of the plugins will get delayed
leading to
a huge time. Usually I haven't had the patience to wait for the whole scan
in such cases;
I guess it
could take days, am I right ?

regards,
Samir Kelekar
Teknotrends Software
Bangalore


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html