I appreciate the thought though. :) Following the nmap broken thread it seems I may be facing the same issue.
Further details: The hung process generally consumes no cycles, but not always. Sometimes I'll come back to check on a box and it'll have a load of 23.00 across the board, corresponding to the 23 hung scans fighting over cycles, but not a new entry in the logs for hours. If I go through and start killing off the hung scans then things will progress for a while and end up in the same position. I have a core file now I'm looking into, although I haven't any experience looking at one. If someone is interested in getting it, or wants me to look for something please let me know. I see a portion that looks to be interesting I'll paste below, and thanks all for the help. Matt @as %s^@save_tests_index^@save_tests_index_fname^@ ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@Can not save session data - %s^@save_tests_data_fname^@save_tests_data^@^@^@^@^@^@^@^@^@^@^@^@^@^@ ^@^@^@^@^@^@^@^@^@^@^@^@^@^@user %s : error in writing data to disk - %s^@r^@%s^@FINISHED^@RESTORE-SESSION^@RESTORE-SESSION-KEY^@^@u ser %s : can not restore session - %s not found^@TESTED_HOSTS^@plugin_set^@-1^@-index^@/^@%s %s ^@fopen ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@user %s : Could not re-open %s ^@SERVER <|> PORT <|> ^@SERVER <|> NOTE <|> ^@SERVER <|> INFO <|> ^@SERVER <|> HOLE <|> ^@^@^@^@^@^@^@^@^@^@^@^@^@%s/kbs^@mkdir(%s) failed : %s ^@%s/%s^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@read(%d, buf, %ld) failed : %s ^@save_kb^@%s=%s^@lseek() failed - %s ^@ftruncate() failed - %s ^@write() failed - %s ^@user^@^@^@^@^@^@^@^@^@^@^@user %s : Can not find KB fd for %s ^@/tmp/^@/NIDS/^@Success/^@Launched/^@SentData/^@%ld %d %s=%s ^@^@^@^@user %s : write kb error - %s ^@^@user %s : Can not save KB for %s - %s^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@user %s : new KB will be saved as %s ^@r^@%d^@.bak^@%s is locked ^@save_kb_backup failed : %s^@save_kb_backup failed : %s ^@^@^@^@^@^@^@^@^@^@^@^@^@user %s : Could not open %s - kb won't be restored for %s ^@Host/dead^@Host/ping_failed^@Services/^@user %s : ERROR - %s ^@preferences^@save_knowledge_base^@yes^@^@^@^@^@^@^@only_test_hosts_whose_k b_we_have^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@ ^@^@^@^@^@^@^@^@^@only_test_hosts_whose_kb_we_dont_have^@kb_restore^@kb_dont _replay_scanners^@kb_dont_replay_info_gathering^@kb_dont _replay_attacks^@kb_dont_replay_denials^@^@^@^@L<94>^T<94>^\<94>^\<94>^\<94> ^d<94>^kb_max_age^@diff_scan^@DIFF_SCAN^@plugin_args^@^@ ^@^@^@^@sendmail^@-t^@-B8BITMIME^@detached_scan_email_filename^@detached_sca n_file_len^@preferences^@user^@^@^@^@^@user %s : scan di d not produce any result, so no email will be sent^@logfile^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@user %s : could not open our em ail %s - %s ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@user %s : could not execute sendmail - %s ^@detached_scan_email_fd^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@ ^@^@^@^@^@o %s : port %s was found to be open ^@warning^@note^@hole^@^@^@^@^@^@^@^@^@o %s : Security %s found on port %s : %s ^@detached_scan_email_address^@SERVER <|> PORT <|> ^@SERVER <|> INFO <|> ^@SERVER <|> NOTE <|> ^@SERVER <|> HOLE <|> ^@^@^@^@^@^@use r %s : mailing results of a detached scan to %s ^@w^@^@^@^@^@^@^@^@^@^@^@user %s : could not create file '%s' (%s) - aborting^@^@^@^@^@^@^@^@^@^@^@^@SERVER <|> ERROR <|> Could not create the temporary file needed for detached scan (%s) - aborting <|> SERVER ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@From: Nessus Daemon <root@%s> ^@To: Nessus User <%s> ^@Subject: Nessus Scan (%s) ^@%s/detached^@%s/%d^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@ ^@^@user %s : could not create %s - %s ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@user %s : session %d is dead - removing its lock^@%s/%s^@%s %s ^@^@^@rtree_node_data_move_up>HU? ^@^@^@^@.^@preferences^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@%s (pid %d) is slow to finish - killing it ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@The plugin %s was too slow to finish - the server killed it ^@tcp^@plugin_args^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@%s (process %d) finished its job in %ld.%.2ld seconds ^@select() ^@non_simult_ports_list^@^@^@^@^@^@^@^@^@^@max_checks (%d) > MAX_PROCESSES (%d) - modify nessus-core/nessusd/pluginlaunch .c ^@user^@^@^@^@^@^@^@^@^@^@user %s : will launch %d plugins at the same time against each host ^@ID^@TIMEOUT^@CATEGORY^@^@^@^@^@^@^@^@pluginlaunch.c:plugin_launch:socketpa ir(1) ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@pluginla unch.c:plugin_launch:socketpair(2) ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@%s/.%s.lck^@.%s.lck^@%d^@^@^@^@^@^ @^@^@^@^@^@The file % s is locked by process %d. Delete %s if you think this is incorrect ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@%02x^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@ ^@^@^@^@^@^@^@^@^@^@plugins_hash(): could not open %s - %s ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@plugins_hash(): filename too long ^@/^@.^@..^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@Could not compute the md5 hash of %s ^@preferences^@plugins_folder^@%s/plugins^@plugins^@ntp_caps^@SERVER <|> PLUGINS_MD5 ^@full_name^@plugin_args^@ID^@%s <|> %s ^@%d <|> %s ^@<|> SERVER ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@%s/plugins^@global_socket^@preferences^@na me: ^@%s - invalid file name ^@bytes: ^@%s/%s^@/dev/null^@saving in %s^@plugins_recv(): open() ^@plugins_recv: recv() ^@^@^@^@^@^@^@^@^@^@SERVER <|> PLUGIN_ACCEP TED <|> SERVER ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@SERVER <|> PLUGIN_DENIED <|> SERVER ----- Original Message ----- From: "Michel Arboi" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, August 14, 2002 7:31 AM Subject: Re: Sudden process hang after nmap > > If so, please try to revert nessus-libraries/libnessus/network.c to > > revision 1.79 and keep us informed. A recent speed hack might be > > buggy... > > Sorry for this bad idea. It doesn't change anything for me. It's even > worse... > - > [EMAIL PROTECTED]: general discussions about Nessus. > * To unsubscribe, send a mail to [EMAIL PROTECTED] with > "unsubscribe nessus" in the body. > - [EMAIL PROTECTED]: general discussions about Nessus. * To unsubscribe, send a mail to [EMAIL PROTECTED] with "unsubscribe nessus" in the body.
