RE: Scan terminates after just one subnet (Nessus 2.2.4) BUG!

["Mercer, Jeff" <Jeff.Mercer_at_itcdeltacom.com>]

Well at least I know i'm not the only one experiencing it, :/

I checked the logs for nessus, and it maybe the problem is that the way the
client is telling the server what IPs to scan. It appears to be trying to
send a list of EVERY single IP!

[Fri Apr 22 15:17:09 2005][28014] user mercer starts a new scan. Target(s) :
10.
1.1.0,10.1.1.1,10.1.1.2,10.1.1.3,10.1.1.4,10.1.1.5,10.1.1.6,10.1.1.7,10.1.1.
8,10
.1.1.9,10.1.1.10,10.1.1.11,10.1.1.12,10.1.1.13,10.1.1.14,10.1.1.15,10.1.1.16
,10.
1.1.17,10.1.1.18,10.1.1.19,10.1.1.20,10.1.1.21,10.1.1.22,10.1.1.23,10.1.1.24
,10.
1.1.25,10.1.1.26,10.1.1.27,10.1.1.28,10.1.1.29,10.1.1.30,10.1.1.31,10.1.1.32
,10.
1.1.33,10.1.1.34,10.1.1.35,10.1.1.36,10.1.1.37,10.1.1.38,10.1.1.39,10.1.1.40
,10.
1.1.41,10.1.1.42,10.1.1.43,10.1.1.44,10.1.1.45,10.1.1.46,10.1.1.47,10.1.1.48
,10.
1.1.49,10.1.1.50,10.1.1.51,10.1.1.52,10.1.1.53,10.1.1.54,10.1.1.55,10.1.1.56
,10.
1.1.57,10.1.1.58,10.1.1.59,10.1.1.60,10.1.1.61,10.1.1.62,10.1.1.63,10.1.1.64
,10.
[etc etc]

That's just freaking INSANE. Looks like it cuts off just about after the
first Class C I was trying to scan.
 

> -----Original Message-----
> From: Alex Campoe [mailto:campoe_at_usf.edu] 
> Sent: Monday, April 25, 2005 9:22 AM
> To: Mercer, Jeff
> Cc: nessus_at_list.nessus.org
> Subject: Re: Scan terminates after just one subnet (Nessus 2.2.4)
> 
> Jeff
> 
> I've had the exact same problem and posted a while back to the list, 
> without lock. I can't estabilish a pattern to the problem. I did 
> multiple installs of Nessus, multiple installs of NessusWX, ran tests 
> without NessusWX. Some times it would through, other times it 
> would not. 
> Very frustrating.
> 
> Alex
> 
> Mercer, Jeff wrote:
> > I'm trying to do a scan of a bunch of different IP ranges, 
> all at least full
> > Class C's. I'm just scanning for a couple of ports to see 
> if they are open,
> > nothing fancy.
> > 
> > I use NessusWX to setup the profile and initiate the scan. 
> Everything runs
> > great, except that after just the first range of addresses 
> are scanned, it
> > stops with "Test complete".
> > 
> > So even though I'm trying to scan 15 distinct ranges (each 
> being anywhere
> > from a /24 to a /28), it always ends after just the first class C is
> > scanned. I haven't had this behavior before...
> > 
> > Is this a known bug?
> > 
> >  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> > Jeff Mercer - ITS Security & BTINet Systems Administration
> > 
> > "This electronic message transmission contains information 
> from the office
> > of Jeff Mercer, ITC^DeltaCom, Inc., which may be 
> confidential or privileged.
> > The information is intended to be for the use of the 
> individual or entity
> > named above.  If you are not the intended recipient, be 
> aware that any
> > disclosure, copying, distribution or use of the contents of 
> this information
> > is prohibited. If you have received this electronic 
> transmission in error,
> > please notify us by telephone 919-863-7257 or by electronic mail
> > jeff.mercer_at_itcdeltacom.com immediately." 
> > _______________________________________________
> > Nessus mailing list
> > Nessus_at_list.nessus.org
> > http://mail.nessus.org/mailman/listinfo/nessus
> 
> -- 
> --  Alex Campoe, CISSP            Information Security 
> Manager       --
> --                                Associate Director, Systems 
>        --
> --  Email: campoe_at_usf.edu         Phone: (813) 974-1796       
>        --
> --  Academic Computing            University of South Florida 
>        --
> --------------------------------------------------------------
> ---------
>