User guide
Copyright © 2014. Tenable Network Security, Inc. All rights reserved. Tenable Network Security and Nessus are registered trademarks of Tenable Network Security, Inc.
15
# /opt/nessus/sbin/nessuscli fetch --register-offline nessus-fetch.rc
Nessus has been registered properly - thank you.
Confirming Nessus Registration Codes
To confirm that the Nessus scanner is registered properly, run the following command:
# /opt/nessus/sbin/nessuscli nessuscli fetch --check
Checking...
Updates are configured properly
To display that the Nessus scanner activation code, run the following command:
# /opt/nessus/sbin/nessuscli nessuscli fetch --code-in-use
Checking...
This scanner is using the following Activation Code: xxxx-xxxx-xxxx-xxxx
Nessus Command Line Bug Reporting Commands
The nessuscli commands also offer the ability to create an archive that can be sent to Tenable to help diagnose issues.
If necessary, you can create a sanitized archive that will hide some sensitive information by not running it in “full” mode.
To create the bug report archive, run the following command:
# /opt/nessus/sbin/nessuscli bug-report-generator
This script will gather some information about your local system
in order to help us diagnose the problems you are encountering.
This program does not send any data over the network, but simply
creates an archive which contains useful information for the Nessus
team to diagnose any problem you may be encountering.
This script can run in two modes:
If you run in "full" mode, this script will gather information you may deem
to be sensitive (such as IP addresses, the list of running processes and your
system log files). This information allows Tenable to better qualify your problem
If you do not run in "full" mode, this script will gather less information
Note that even in normal mode, depending on how you perform scanning
some "sensitive" information may be contained in the resulting
archive. Feel free to inspect it before sending it to Tenable.
Run in "full" mode? (y/n) [n]: n
Would you like to scrub the first two digits of any IPv4 address seen in the log
files?
This may take several minutes.
Sanitize IPv4 subnets? (y/n) [n]: y
Bug report file name? [/opt/nessus/var/nessus/logs/nessus-bug-report-archive.tar.gz]:
~/nessus-bug-report-archive.tar.gz
-> Copying /etc/redhat-release...