Remote host dead?

Roman Medina-Heigl Hernandez <[email protected]>
Newsgroups gmane.comp.security.nessus.general
Message-ID <[email protected]>
Hello,

I'm trying to scan a host with the default policy. The host is alive and 
responding to pings. I got no results when scanning with Nessus 3.2.0 
(Windows). Looking at scan.log (in he "logs" dir), I can see a "remote host 
is dead". But my question is why? If I run nmap against the host, I can see 
unprivileged ports open (>1024) and of course it's responding to ping. I 
also entered 1-65535 in "port scanner range". No luck at all. Am I missing 
something? Perhaps a bug in Nessus?

Another question, how could I debug this? If I enable the option to "save a 
packet capture of the scan", I couldn't find any new log on logs dir (where 
should it be placed?)

Log attached (IP stripped; I could provide it in private for 
testing/debugging purposes):
[Mon Jun 23 20:56:43 2008][540] Use default port range
[Mon Jun 23 20:56:48 2008][540] user localuser : testing X.X.X.X (X.X.X.X) 
[540]
[Mon Jun 23 20:56:48 2008][540] Scan X.X.X.X using 21942 plugins
[Mon Jun 23 20:56:48 2008][540] user localuser : launching 
clrtxt_proto_settings.nasl against X.X.X.X [1]
[Mon Jun 23 20:56:48 2008][540] user localuser : launching 
dont_scan_settings.nasl against X.X.X.X [2]
[Mon Jun 23 20:56:48 2008][540] user localuser : launching 
ssh_settings.nasl against X.X.X.X [3]
[Mon Jun 23 20:56:48 2008][540] clrtxt_proto_settings.nasl (process 1) 
finished its job against X.X.X.X in 0.000 seconds
[Mon Jun 23 20:56:48 2008][540] dont_scan_settings.nasl (process 2) 
finished its job against X.X.X.X in 0.000 seconds
[Mon Jun 23 20:56:48 2008][540] ssh_settings.nasl (process 3) finished its 
job against X.X.X.X in 0.000 seconds
[Mon Jun 23 20:56:48 2008][540] user localuser : launching 
snmp_settings.nasl against X.X.X.X [4]
[Mon Jun 23 20:56:52 2008][540] snmp_settings.nasl (process 4) finished its 
job against X.X.X.X in 3.578 seconds
[Mon Jun 23 20:56:52 2008][540] user localuser : launching ping_host.nasl 
against X.X.X.X [5]
[Mon Jun 23 20:56:54 2008][540] ping_host.nasl (process 5) finished its job 
against W.W.W.W in 2.921 seconds
[Mon Jun 23 20:56:54 2008][540] user localuser : launching 
dont_scan_printers.nasl against X.X.X.X [6]
[Mon Jun 23 20:56:54 2008][540] The remote host (X.X.X.X) is dead
[Mon Jun 23 20:56:54 2008][540] Finished testing X.X.X.X. Time : 6.718 
secs, 6 plugins launched
[Mon Jun 23 20:56:54 2008][540] 1 hosts scanned

-- 

Saludos,
-Roman

PGP Fingerprint:
09BB EFCD 21ED 4E79 25FB  29E1 E47F 8A7D EAD5 6742
[Key ID: 0xEAD56742. Available at KeyServ]
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.