Skip to content

Commit

Permalink
Add: document two new scanner preferences for alive tests (#1204)
Browse files Browse the repository at this point in the history
  • Loading branch information
jjnicola committed Oct 13, 2022
1 parent 0c8c8c3 commit 9a05f63
Showing 1 changed file with 6 additions and 0 deletions.
6 changes: 6 additions & 0 deletions doc/openvas.8.in
Original file line number Diff line number Diff line change
Expand Up @@ -100,6 +100,12 @@ This is the default range of ports that the scanner plugins will probe. The synt
.IP test_alive_hosts_only
If this option is set to 'yes', openvas will scan the target list for alive hosts in a separate process while only testing those hosts which are identified as alive. This boosts the scan speed of target ranges with a high amount of dead hosts significantly.

.IP alive_test_ports
Preference to set the port list for the TCP SYN and TCP ACK alive test methods. This setting overwrites the default port list: "21-23,25,53,80,110-111,135,139,143,443,445,993,995,1723,3306,3389,5900,8080".

.IP test_alive_wait_timeout
This option is to set how long (in sec) Boreas (alive test) waits for replies after last packet was sent. Default: 3 seconds

.IP optimize_test
By default, optimize_test is enabled which means openvas does trust the remote host banners and is only launching plugins against the services they have been designed to check. For example it will check a web server claiming to be IIS only for IIS related flaws but will skip plugins testing for Apache flaws, and so on. This default behavior is used to optimize the scanning performance and to avoid false positives. If you are not sure that the banners of the remote host have been tampered with, you can disable this option.

Expand Down

0 comments on commit 9a05f63

Please sign in to comment.