nessus stops after port scanning

[Furious Furious]

--- Josh Zlatin-Amishav <josh at tkos.co.il> έγραψε:

> On Sun, 2 Oct 2005, Furious Furious wrote:
> 
> > --- Josh Zlatin-Amishav <josh at tkos.co.il>:
> >
> > The log of console is :
> >
> > Nessus Console [Version 1.4.5] Ready
> > SSL library initialized
> > Connecting to server xxx.xxx.xxx.xxx (port 1241)
> using
> > TLSv1 encrypted connection...
> > SSL connection using AES256-SHA
> > Using < NTP/1.2 >
> > Connection with the server [xxx.xxx.xxx.xxx]
> > established.
> > 9298 plugins loaded
> > 152 preferences received
> > 0 rules received
> > Scan started 02-Oct-2005 19:31:54
> > Scan finished 02-Oct-2005 19:32:03
> 
> Can you show us the log of nessusd.messages and your
> nessus config file.
> Does the knowledge base for the target show
> anything?
> 
> --
>   - Josh
> 
Sorry, I am a newbie with Linux and I didn't know
anything about log file, config file and knowledge
base. Hopefully, I managed to find these files now ;-)
This is the log :

[Sun Oct  2 19:27:10 2005][7466] nessusd 2.2.5.
started 
[Sun Oct  2 19:30:24 2005][7466] connection from
xxx.xxx.xxx.6 
[Sun Oct  2 19:30:25 2005][7902] Client requested
protocol version 12. 
[Sun Oct  2 19:30:28 2005][7902] successful login of
admin from xxx.xxx.xxx.6 
[Sun Oct  2 19:31:48 2005][7902] user admin : session
will be saved as
/usr/local/var/nessus/users/admin/sessions/20051002-193148-index
[Sun Oct  2 19:31:48 2005][7902] user admin starts a
new scan. Target(s) : xxx.xxx.xxx.12, with max_hosts =
16 and max_checks = 10 
[Sun Oct  2 19:31:48 2005][7902] user admin : testing
xxx.xxx.xxx.12 (xxx.xxx.xxx.12) [7927] 
[Sun Oct  2 19:31:48 2005][7927] user admin : new KB
will be saved as
/usr/local/var/nessus/users/admin/kbs/xxx.xxx.xxx.12
[Sun Oct  2 19:31:48 2005][7927] user admin :
launching ssh_settings.nasl against xxx.xxx.xxx.12
[7928] 
[Sun Oct  2 19:31:48 2005][7927] ssh_settings.nasl
(process 7928) finished its job in 0.036 seconds 
[Sun Oct  2 19:31:48 2005][7927] user admin :
launching ping_host.nasl against xxx.xxx.xxx.12 [7929]

[Sun Oct  2 19:31:48 2005][7927] ping_host.nasl
(process 7929) finished its job in 0.179 seconds 
[Sun Oct  2 19:31:48 2005][7927] user admin :
launching nessus_tcp_scanner.nes against
xxx.xxx.xxx.12 [7930] 
[Sun Oct  2 19:31:54 2005][7927]
nessus_tcp_scanner.nes (process 7930) finished its job
in 5.862 seconds 
[Sun Oct  2 19:31:54 2005][7927] user admin :
launching smtp_settings.nasl against xxx.xxx.xxx.12
[7934] 
[Sun Oct  2 19:31:54 2005][7927] user admin :
launching smb_scope.nasl against xxx.xxx.xxx.12 [7935]

[Sun Oct  2 19:31:54 2005][7927] user admin :
launching logins.nasl against xxx.xxx.xxx.12 [7936] 
[Sun Oct  2 19:31:54 2005][7927] user admin :
launching kerberos.nasl against xxx.xxx.xxx.12 [7937] 
[Sun Oct  2 19:31:54 2005][7927] user admin :
launching http_ids_evasion.nasl against xxx.xxx.xxx.12
[7938] 
[Sun Oct  2 19:31:54 2005][7927] user admin :
launching global_settings.nasl against xxx.xxx.xxx.12
[7939] 
[Sun Oct  2 19:31:54 2005][7927] user admin :
launching ids_evasion.nasl against xxx.xxx.xxx.12
[7940] 
[Sun Oct  2 19:31:54 2005][7927] user admin :
launching dont_scan_printers.nasl against
xxx.xxx.xxx.12 [7941] 
[Sun Oct  2 19:31:54 2005][7927] user admin :
launching dont_print_on_printers.nasl against
xxx.xxx.xxx.12 [7942] 
[Sun Oct  2 19:31:54 2005][7927] user admin :
launching cgibin_in_kb.nasl against xxx.xxx.xxx.12
[7943] 
[Sun Oct  2 19:31:54 2005][7927] cgibin_in_kb.nasl
(process 7943) finished its job in 0.073 seconds 
[Sun Oct  2 19:31:54 2005][7927] user admin :
launching find_service.nes against xxx.xxx.xxx.12
[7944] 
[Sun Oct  2 19:31:54 2005][7902] user admin : test
complete
[Sun Oct  2 19:31:54 2005][7902] Total time to scan
all hosts : 6 seconds 
[Sun Oct  2 19:31:54 2005][7902] user admin : Kept
alive connection
[Sun Oct  2 19:33:51 2005][7902] Communication closed
by client 
[Sun Oct  2 20:08:05 2005][7466] received the TERM
signal 

I have attached the config file.
I found two files at the directory for the knowledge
base. The contents of file xxx.xxx.xxx.12 are :

1128270708 3 Launched/14273=1
1128270708 3 Launched/10180=1
1128270708 3 Launched/10335=1
1128270708 3 Ports/tcp/22=1
1128270708 3 TCPScanner/CnxTime1000/22=1
1128270708 3 Ports/tcp/80=1
1128270708 1 Banner/22=SSH-2.0-OpenSSH_3.9p1
Debian-1ubuntu2\n
1128270708 3 TCPScanner/RwTime1000/22=198
1128270714 3 TCPScanner/OpenPortsNb=2
1128270714 3 TCPScanner/ClosedPortsNb=1022
1128270714 3 Host/scanned=1
1128270714 3 Host/scanners/nessus_tcp_scanner=1
1128270714 3 Launched/11038=1
1128270714 3 Launched/10917=1
1128270714 3 Launched/10870=1
1128270714 3 Launched/17351=1
1128270714 3 Launched/10890=1
1128270714 3 Launched/12288=1
1128270714 3 Launched/10889=1
1128270714 3 Launched/11933=1
1128270714 3 Launched/12241=1
1128270714 3 Launched/10308=1
1128270714 3 Launched/10330=1

and the contents of file .xxx.xxx.xxx.12.lck are :
7927


	

	
		
___________________________________________________________ 
Χρησιμοποιείτε Yahoo!; 
Βαρεθήκατε τα ενοχλητικά μηνύματα (spam); Το Yahoo! Mail 
διαθέτει την καλύτερη δυνατή προστασία κατά των ενοχλητικών 
μηνυμάτων http://login.yahoo.com/config/mail?.intl=gr 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: nessusd.conf
Type: application/octet-stream
Size: 3458 bytes
Desc: 718541910-nessusd.conf
Url : http://mail.nessus.org/pipermail/nessus/attachments/20051002/3ad70f86/attachment.obj