Re: Nessus scripts and Moore's Law

George Theall wrote:
> On Thu, Nov 11, 2004 at 06:06:29PM +0100, Michel Arboi wrote:
> 
> 
>>I have come with several possibilities to reduce the overall scanning
>>time:
> 
> 
> What are people's feelings about combining related plugins, especially
> those that rely on simple version strings? For example, I count 9
> plugins named apache_2_0_*.nasl, most of which do nothing more than
> check the banner.  It seems to me that they could be replaced by a
> single plugin that checks the banner against the latest version and is
> updated as new versions and vulnerabilities are announced.  [ Perhaps
> nessus-update-plugins could be augmented to support removing plugins
> (optionally??) to help with this. ]
> 

This is *way* out there....but, didn't Kaminsky (sp?) write a 2-part 
scanner?  So, you have the 'scanner' portion which sends the stimulus to 
the server, and you have the 'collector' which reads the return data. 
In this way, the redundant banner checks (and similar) are done in the 
'collector'.

John




_______________________________________________
Nessus-devel mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus-devel