Nessus 3.0 has been released...

From the newsletter...


I'm thrilled to announce the availability of Nessus 3.0.0 !

Nessus 3 is a complete rewrite of the Nessus engine, designed for
speed and efficency -- as a result Nessus 3 is on average twice as
fast as Nessus 2 (with spikes as high as five times faster) and is
less resource intensive.


The Nessus 3 major enhancements are the following :

- New NASL3 engine
- Improved plugin storage for faster startup time
- Improved networking functions
- New scanner architecture to be both efficient and robust
- The Nessus daemon fetches the plugins automatically when registered
(this can be disabled in nessusd.conf)
- Improved error handling


Nessus 3 is available on the following platforms :

- Red Hat ES3 and ES4
- SuSE 9.3 and 10.0
- FreeBSD 5 and 6
- Fedora Core 4
- Debian 3.1

The following platforms will be supported in early 2006 :

- Mac OS X 10.3 and 10.4
- Microsoft Windows 2000/XP Pro/2003
- Solaris 9 and 10


I'm also happy to announce that we're extending the service we offer
to our direct feed customers to include full email support, with
access to our customer portal which gives users the ability to reset
their activation codes, track their support tickets, and have access
to the Nessus Support Knowledge base.

We have also changed our plugins license agreement so that
consultants do not have to fax us to ask permission to use the plugin
feed any more.

Nessus 3 can be downloaded at <http://www.nessus.org/download/>


Thanks,


-- Renaud

Dang! I just finished the 2.6 upgrade!

grumble ... grumble ...

;)

I haven't been reading up since they closed Nessus and gnessus or whatever was announced (the fork.) Is 3.0.0 available from source for non-Tenable paying users?

Looks like you have to go through the registration process prior to the download. I'm not ready to do that yet, so I didn't get to the listings. I suspect you get the binaries and installer, rather than the source.

I may be wrong. Wouldn't be the first time.

;)

Yup, you just get the binaries...

Quote:

---

Operating System Package Size
Debian 3.1 Nessus-3.0.0-debian3_i386.deb 4760 KB
Red Hat ES 3 Nessus-3.0.0-es3.i386.rpm 5689 KB
Red Hat ES 4 Nessus-3.0.0-es4.i386.rpm 5726 KB
FreeBSD 5 Nessus-3.0.0-fbsd5.tbz 3738 KB
FreeBSD 6 Nessus-3.0.0-fbsd6.tbz 3747 KB
Fedora Core 4 Nessus-3.0.0-fc4.i386.rpm 6116 KB
SuSE 10 Nessus-3.0.0-suse10.0.i586.rpm 4524 KB
SuSE 9.3 Nessus-3.0.0-suse9.3.i586.rpm 4565 KB

---

They'll email you a registration code.

I believe that you just don't get the most speedy updates if you're not a paying customers.

http://www.nessus.org/plugins/index....ew=faq#anchor5

I made my first pass at installing the RPM made for SuSE 9.3. It failed due to shared library dependencies (or so it believes). I'm going to resolve it later today but thus far, I've seen what I expect from a new rev - installation issues.

Tenable is now only providing the source code for revs earlier than 3 via direct FTP download. If you want the installer for any of the 2.x builds, you'll have to get it through the website where you have to agree to the EULA.

Quote:

---

I believe that you just don't get the most speedy updates if you're not a paying customers.

---

Yep Phisssshy. There is a seven day lag on non GPL nasls. The catch here is that soon there will be no GPL nasls as Tenable races through the plugin library, rewrites the nasls, and then slaps a Tenable copyright on them.

Hey Hey,

The debian install went through without a hitch.

Quote:

---

colinux:/home/user# dpkg -i Nessus-3\[1\].0.0-debian3_i386.deb
(Reading database ... 55093 files and directories currently installed.)
Preparing to replace nessus 2.2.5-2 (using Nessus-3[1].0.0-debian3_i386.deb) ...
Unpacking replacement nessus ...
Setting up nessus (3.0.0) ...
nessusd (Nessus) 3.0.0. for Linux
(C) 2005 Tenable Network Security, Inc.

/opt/nessus//var/nessus/CA created
/opt/nessus//com/nessus/CA created
nessusd (Nessus) 3.0.0. for Linux
(C) 2005 Tenable Network Security, Inc.

Processing the Nessus plugins...
[##################################################]

All plugins loaded

- Please run /opt/nessus/sbin/nessus-add-first-user to add an admin user
- Register your Nessus scanner at http://www.nessus.org/register/ to obta
in
all the newest plugins
- You can start nessusd by typing /etc/init.d/nessusd start

---

Now this is running through coLinux but it sitll worked beautiful... I will say when it processes the plugins it's quite the resource hog... coLinux sits in the background using 0% CPU and 7MB RAM... While the RAM never increased during the plugin processing.... the CPU was sitting steady between 60-80%... I don't even see it leave 0% when I'm running X. (Mind you starting the daemon is MUCH faster than it was with the 2.x family.... like 1/4 of the time at the most)...

I just got called upstairs... I'm going to run a few scans when I get back and I'll post to results....I've noticed a lag in their registration system... I submitted a request like 30 minutes ago and still don't have the email with the activation code.

Peace,
HT

I didn't get it installed on FC3... but they only released a binary for FC4.

I'm going to get FC4 installed in a vmware machine.

OK folks, the SuSE 9.3 error happens on every single install I have. The solution is to install this RPM: db42-4.2.52-3.

After that, she fires up just fine.

OK. Debian install went fine :) But, we also have a Trustix box used for our Enterprise. Problem is, there is no binaries for Trustix available. Does anyone know if the another install will work? We downloaded the RedHat installation and were thinking of trying that out but I'd like some insight. Anyone know if that will work? Last time we complied it from source code. :confused:

You'll need to use the 2.2.6 build. Give that a whirl. You can DL the installer from the nessus site.

Anyone install on RH ES3 or ES4? In general, any changes in the reporting format or options? We just went to 2.2.6 not too long ago.

Thanks much for the info already me'ah.

I haven't tried them, but there are packages for RHES 3 and 4 available for download.

As for me, the .deb installed perfectly on Ubuntu. :) (Cheers for your post TH13)

Thanks horse13, I ended up installing Suse on that workstation and moving up to 3.0.3. It's been working great for me so far.