mondloch at berbee
Nov 16, 2007, 10:28 AM
Post #1 of 1
(225 views)
Permalink
|
|
Restore/Extract from Knowledge Base
|
|
Hi,
I have a large scan that was terminated shortly before it would normally
have completed. I'm hoping to somehow extract the data stored in the KBS
to assemble a usable NBE.
I've modified my nessusrc as follows:
kb_restore = yes
save_knowledge_base = yes
only_test_hosts_whose_kb_we_dont_have = no
only_test_hosts_whose_kb_we_have = yes
kb_dont_replay_scanners = yes
kb_dont_replay_info_gathering = yes
kb_dont_replay_attacks = yes
kb_dont_replay_denials = yes
kb_max_age = 864000
I then kick of the scan again using the modified nessusrc file.
Unfortunately, when it completes the only results present for each host
are from check_ports.nasl (i.e. "The following ports were open at the
beginning of the scan but are now closed:").
Why is check_ports not just relying on the KBS? I'm no longer on the
test network, so if it actually tries to check a host's status it is
obviously not going to work.
Any suggestions on how to get this data into a usable form would be
greatly appreciated.
Thanks,
Joe
|
signature.asc
