Mailing List Archive

command line and empty reports???
Morning group,
I am running RHEL 4.0, using Nessus 3.2(server) and Nessusclient 3.2.1 (client) software. Using the GUI, I can create a new scan policy "MY_MS_Patches" (scan for 2008 MS security patches). Choose a subnet to run it against and save it as: /home/mike/Nessus/Scans/winscan181_0.nessus . I then run it and in the report Tab I get a list of the vulnerable machines and their missing patches - this is good
But I want to have a scan scheduled at night and have it run during off-peak hours, so I created a script.sh and entered the following commands:
/opt/nessus/bin/nessus -dot-nessus /home/mike/Nessus/Scans/winscan181_0.nessus -policy 'MY_MS_Patches' localhost 1241 nessus password /home/mike/Nessus/Reports/winscan181_0.nbe -x 2>&1 > errorfile.txt
The script runs, and creates the file: /home/mike/Nessus/Reports/winscan181_0.nbe but all that is displayed is the list of IPs scanned.
I know that there should be "high" vulnerabilities; because when i run it from the GUI they are in the produced report.
Any thoughts?


Thanks - Mike

________________________________
This e-mail message (including any attachments) is for the sole use of
the intended recipient(s) and may contain confidential and privileged
information. If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination, distribution
or copying of this message (including any attachments) is strictly
prohibited.

If you have received this message in error, please contact
the sender by reply e-mail message and destroy all copies of the
original message (including attachments).
Re: command line and empty reports??? [ In reply to ]
Two items for consideration.

1) I'm using the following syntax for automated command line scanning with
a similar setup
[full_path_to_nessus] --qx [host_name_or_ip] [port] [username] [password]
[full_path_to_output_file] -T nessus -c [full_path_to_dot_nessus_policy]

2) Have you tried it without the `2>&1 > errorfile.txt` portion?


----------------------------------------------------
Mike Sleeper CISSP, CCSE, CCFS
Computer & Information Security
Off: 803.725.3100
Lab: 803.725.2202
Pgr: 803.725.PAGE (#13146)
----------------------------------------------------

************* DISCLAIMER ***********************************
The above comments are my own and do not
necessarily represent those of my employer or
contractor. Any information or advice provided by
me shall be given under the "caveat emptor" principal.
*****************************************************************



"Chilcott, Mike" <Michael.Chilcott@emoryhealthcare.org>
Sent by: nessus-bounces@list.nessus.org
08/11/2008 08:46 AM

To
"'Nessus@list.nessus.org'" <Nessus@list.nessus.org>
cc

Subject
command line and empty reports???






Morning group,
I am running RHEL 4.0, using Nessus 3.2(server) and Nessusclient 3.2.1
(client) software. Using the GUI, I can create a new scan policy
“MY_MS_Patches” (scan for 2008 MS security patches). Choose a subnet to
run it against and save it as: /home/mike/Nessus/Scans/winscan181_0.nessus
. I then run it and in the report Tab I get a list of the vulnerable
machines and their missing patches – this is good
But I want to have a scan scheduled at night and have it run during
off-peak hours, so I created a script.sh and entered the following
commands:
/opt/nessus/bin/nessus –dot-nessus
/home/mike/Nessus/Scans/winscan181_0.nessus –policy ‘MY_MS_Patches’
localhost 1241 nessus password /home/mike/Nessus/Reports/winscan181_0.nbe
–x 2>&1 > errorfile.txt
The script runs, and creates the file:
/home/mike/Nessus/Reports/winscan181_0.nbe but all that is displayed is
the list of IPs scanned.
I know that there should be “high” vulnerabilities; because when i run
it from the GUI they are in the produced report.
Any thoughts?


Thanks - Mike

This e-mail message (including any attachments) is for the sole use of
the intended recipient(s) and may contain confidential and privileged
information. If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination, distribution
or copying of this message (including any attachments) is strictly
prohibited.

If you have received this message in error, please contact
the sender by reply e-mail message and destroy all copies of the
original message (including attachments).
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus