Re: audit stoped and relaunched

[Josh Zlatin-Amishav <josh_at_tkos.co.il>]

On Mon, 21 Nov 2005, Sergi - wrote:

> Hello list …
>
> I have a doubte whit nessus to relaunch an incomplet
> audit.
> When I use nmap whit a script, if the process named
> nmap whit a concret options
> and host and if the STAT of this process is D, Z, T or
> W, then I  kill the process and re
> launch the nmap audit. But nessus is diferent ...When
> nessus are running a audit
> the process table (ps) have a lot a process named
> nessus, one for every plugin.
>
> My doubte is:
> Have nessus a system for relaunch a stoped or killed
> audit just
> in the step where was be stoped ?

Yes, provided that you use setup nessus to use the knowledge_base.
The following settings in you nessus configuration file control which
plugins will be run if the output of those plugins are already in the
knowledge_base and are less then kb_max_age old.

kb_restore = yes
kb_dont_replay_scanners = yes
kb_dont_replay_info_gathering = yes
kb_dont_replay_attacks = yes
kb_dont_replay_denials = yes
kb_max_age = 86400

--
 - Josh