Re: banner submission

["George A. Theall" <theall@tenablesecurity.com>]

On Tue, Oct 31, 2006 at 10:33:46AM -0500, Nick Baronian wrote:

> What is the address that we are suppose to submit banner submissions?

The one you chose works for now, but we'll update the report so it
offers a specific address.

> If the list is it then the following is Dell OpenManage.
> 
> rxmon (1311/tcp)      An unknown server is running on this port.
> If you know what it is, please send this banner to the Nessus team:
> Type=get_http
> 0x00: 15 03 01 00 02 02 0A .......

This looks like a TLSv1 alert message, which agrees with the fact that
OpenManage uses TCP port 1311 for an HTTPS server according to:

http://support.dell.com/support/edocs/software/smsom/4.4/en/ug/security.htm

I suspect that your scan was configured to only test for SSL-based
services on known ports (1311 is not one of those). If you have a
chance, run another scan against this particular port on your target(s)
and make sure "Test SSL based services" (look under Options, Prefs.,
Services) is set to "All". Let me know if it still flags the service as
unknown.

George
-- 
theall@tenablesecurity.com
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus