Problem with nmap_wrapper.nes - NMAP not scanning

Matt C. baddog at baddogmedia.com
Wed Aug 11 13:45:13 EDT 2004


I am having problems with Nessus using NMAP to port scan targets (ID:
10336). Specifically it does not appear to scan any targets. Both the
SYN scan (11219) and the TCP Connect scan (10335) work correctly. 

I am running Nessus version 2.0.12 and NMAP 3.55.
Nmap is located within my $PATH and can be called directly from the
command line without a problem.
nmap_wrapper.nes is Version: $Revision: 1.105 $
All of my scanning occurs from the nessus command line client.

As you can see below from the scan log, the nmap_wrapper.nes is
finishing almost instantaneously. 

user xxxxx starts a new scan. Target(s) : zzz.zzz.zzz.zzz, , with
max_hosts = 30 and max_checks = 25
user xxxxx : testing dns-name-ip (zzz.zzz.zzz.zzz) [12442]
user xxxxx : new KB will be saved as
/usr/local/var/nessus/users/xxxxx/kbs/dns-name-ip
user xxxxx : launching ping_host.nasl against dns-name-ip [12443]
ping_host.nasl (process 12443) finished its job in 0.010 seconds
user xxxxx : launching nmap_wrapper.nes against dns-name-ip [12444]
nmap_wrapper.nes (process 12444) finished its job in 0.019 seconds

Any help that can be provided in troubleshooting this issue would be
most appreciated.

Regards,

Matt




---------A portion of my scan config file for your review:-----------

paranoia_level = 2
nessusd_user = xxxx
trusted_ca = /usr/local/com/nessus/CA/cacert.pem
nessusd_host = 127.0.0.1
begin(SCANNER_SET)
 10180 = yes
 10335 = no
 10336 = yes
 10796 = no
 11219 = no
 11840 = no
end(SCANNER_SET)

begin(SERVER_PREFS)
 kb_dont_replay_attacks = yes
 admin_user = xxxx
 plugin_upload = no
 plugin_upload_suffixes = .nasl
 kb_max_age = 864000
 kb_dont_replay_denials = yes
 kb_dont_replay_info_gathering = yes
 Kb_dont_replay_attacks = yes
 kb_dont_replay_scanners = yes
 only_test_hosts_whose_kb_we_have = no
 kb_restore = no
 only_test_hosts_whose_kb_we_dont_have = no
 save_knowledge_base = yes
 auto_enable_dependencies = no
 plugins_timeout = 320
 non_simult_ports = 139, 445
 delay_between_tests = 1
 checks_read_timeout = 15
 language = english
 per_user_base = /usr/local/var/nessus/users
 report_killed_plugins = yes
 port_range = 1-1024
 unscanned_closed = no
 max_hosts = 30
 max_checks = 25
 cgi_path = /cgi-bin:/scripts
 reverse_lookup = yes
 optimize_test = no
 safe_checks = yes
 use_mac_addr = no
 detached_scan = no
 continuous_scan = no
 log_whole_attack = yes
 slice_network_addresses = no
end(SERVER_PREFS)

begin(PLUGINS_PREFS)
 Services[entry]:Wrapped service read timeout : = 2
 Services[entry]:Network read/write timeout : = 4
 Services[entry]:Network connection timeout : = 4
 Default accounts[entry]:Simultaneous connections : = 20
 Nmap[radio]:Timing policy : = Normal
 Nmap[entry]:Ports scanned in parallel = 100
 Nmap[entry]:Source port : = any
 Nmap[checkbox]:Do not randomize the  order  in  which ports are scanned
= yes
 Ping the remote host[checkbox]:Do a TCP ping = no
 Ping the remote host[checkbox]:Do an ICMP ping = yes
 Ping the remote host[entry]:Number of retries (ICMP) : = 10
 Ping the remote host[checkbox]:Make the dead hosts appear in the report
= yes
 Nmap[radio]:TCP scanning technique : = SYN scan
 Nmap[checkbox]:UDP port scan = no
 Nmap[checkbox]:RPC port scan = no
 Nmap[checkbox]:Ping the remote host = no
 Nmap[checkbox]:Identify the remote OS = no
 Nmap[checkbox]:Use hidden option to identify the remote OS = no
 Nmap[checkbox]:Fragment IP packets (bypasses firewalls) = no
 Nmap[checkbox]:Get Identd info = no
 Nmap[radio]:Port range = Default range (nmap-services + privileged
ports)
 Services[entry]:Number of connections done in parallel : = 5
 Global variable settings[checkbox]:Enable experimental scripts = no
 Global variable settings[checkbox]:Thorough tests (slow) = no
 Global variable settings[radio]:Report verbosity = Normal
 Global variable settings[radio]:Log verbosity = Normal
 Global variable settings[entry]:Debug level = 0
 Ping the remote host[entry]:TCP ping destination port(s) : = bulit-in
 Ping the remote host[checkbox]:Log live hosts in the report = yes
 Global variable settings[radio]:Report paranoia = Normal
 Nmap[entry]:Data length : =
 Nmap[entry]:Ports scanned in parallel (max) =
 Nmap[entry]:Host Timeout (ms) : =
 Nmap[entry]:Min RTT Timeout (ms) : =
 Nmap[entry]:Max RTT Timeout (ms) : =
 Nmap[entry]:Initial RTT timeout (ms) =
 Nmap[entry]:Minimum wait between probes (ms) =
 Nmap[file]:File containing nmap's results : =
end(PLUGINS_PREFS)

begin(PLUGIN_SET)
 10001 = no
 10002 = no
 10003 = no
 10004 = no
 10005 = no
 10006 = no
 10007 = no
~All plugins defined correctly~
 14244 = yes
 14256 = yes
 14258 = yes
 14257 = yes
end(PLUGIN_SET)

begin(SERVER_INFO)
 server_info_nessusd_version = 2.0.12
 server_info_libnasl_version = 2.0.12
 server_info_libnessus_version = 2.0.12
 server_info_thread_manager = fork
 server_info_os = Linux
 server_info_os_version = 2.4.20-8
end(SERVER_INFO)

begin(RULES)
end(RULES)




More information about the Nessus mailing list