Ok, for the record in case this happens to anyone else, I have deleted
the plugins directory, re-created it and re-run nessus-update-plugins
which has repopulatd it. Restarting nessus now gives no problems..
Re-running the scan of the host now shows everything normally as it
did before and I can get back to tweaking my original server that I
wanted to test.
-h
On 28/01/07, Hari Sekhon <hpsekhon@googlemail.com> wrote:
I just tried to use it to scan the one thing I wanted to in the first
place but the results have false positives that are wildly off for ssh
on my linux box for example. It is complaining about accounts that I
know don't exist and having just checked again definitely aren't in
/etc/passwd. This didn't happen the last time I scanned before
upgrading. For example root is one of the false positives but I don't
allow root password logins.
Seems my installation is broken.
Should I just try scrapping eveything and starting again?
Hari
On 28/01/07, Hari Sekhon <hpsekhon@googlemail.com> wrote:
> I found a posting from the archive and followed it's recommendation
> given by Renaud. So I did:
>
> # nessus-fetch --check
> nessnessus-fetch is properly configured to receive a direct plugin feed
> # nessus-update-plugins
> # nessusd
> Loading the plugins... 8874 (out of 13845)
> ------------------------------------------------------------------------------
> You are running a version of Nessus which is not configured to receive
> a full plugin feed. As a result, your security audits might produce incomplete
> results.
>
> To obtain a full plugin feed, you need to register your Nessus scanner
> at the following URL :
>
> http://www.nessus.org/register/
>
> ------------------------------------------------------------------------------
>
> Loading the plugins... 12648 (out of 13845)[16712]() Including
> crypto_func.inc which is not authenticated - losing our authenticated
> status
> All plugins loaded
>
>
> So on the one hand it tells me I have a correct direct feed and on the
> other hand it says I have a both a feed problem and also some auth
> problem related to this crypto_func.inc
>
> Anyone got any ideas on fixing this?
>
> Thanks
>
> Hari
>
>
> On 28/01/07, Hari Sekhon <hpsekhon@googlemail.com> wrote:
> > Hi,
> > I have just upgraded my nessus registered installation of 2.2 to
> > 2.3 and now it is giving the following message every time I start
> > nessud:
> >
> >
------------------------------------------------------------------------------
> > You are running a version of Nessus which is not configured to receive
> > a full plugin feed. As a result, your security audits might produce
incomplete
> > results.
> >
> > To obtain a full plugin feed, you need to register your Nessus scanner
> > at the following URL :
> >
> > http://www.nessus.org/register/
> >
> >
------------------------------------------------------------------------------
> >
> > [21295]() Including crypto_func.inc which is not authenticated -
> > losing our authenticated status
> >
> >
> > Does this mean I have to re register? Also, what is the implication of
> > the crypto_func.inc message?
> >
> >
> >
> > Thanks
> > --
> > Hari Sekhon
> >
>
>
> --
> Hari Sekhon
>
--
Hari Sekhon
--
Hari Sekhon
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
|