mikhail at nessus
Sep 3, 2008, 12:26 AM
Post #4 of 4
On Tue, 2 Sep 2008 15:24:09 -0600
Re: what could explain seen ports one day, not seen the next, never seen then all the sudden seen?
[In reply to]
"[SiN]" <x0sin0x [at] gmail> wrote:
On Unix or Windows?
> ive tried a few different methods and port scanners.
Supposing you have the Unix version, the results might be more reliable
if you upgrade, because of misc improvements in the TCP port scanner
The SNMP "pseudo scanner" may show open ports which are in fact
filtered, as it directly asks the remote machine and cannot guess if
there is a firewall on the way. It may also be confused by buggy SNMP
agents (mainly NT4 and Win2000). The newest versions include a new
preference ("Probe open ports") that will get rid of these false alerts.
You do not give much details about your configuration, your bandwidth,
the bandwidth of the targets, ping time, etc., so I'm aonly guessing.
In difficult configurations, scanners cannot do miracle, i.e. be quick _and_
reliable. If you bandwidth is limited, you have to reduce max_hosts and
BTW, are some of the targets infected by worms? Malware can ruin a
bandwidth when they try to propagate.
PGP key ID : 0x0BBABA91 - 0x1320924F0BBABA91
Fingerprint: 1048 B09B EEAF 20AA F645 2E1A 1320 924F 0BBA BA91
Nessus mailing list
Nessus [at] list