Nessus 2.0.5 hangs during scans and must be kill'd.
I saw a message in the archives about a comm_send_status(4) error, but
there wasn't a "fix" for it.
Using 'ps -Af', I can see the plugins running until I start getting
these errors in nessusd.dump:
-> [32072] comm_send_status(7): receiving ACK failed! Maybe we should
exit now [Interrupted system call]
-> [32072] comm_send_status(7): receiving ACK failed! Maybe we should
exit now [No such file or directory]
Obviously, your PID will differ.
After this, I check 'ps -Af' after every plugin successfully completed
message and, even though it says it is launching new plugins, it instead
creates these errors and no new plugins are actually launched.
I tailed nessusd.messages and nessusd.dump simultaneously and included a
couple sections the output below.
I included a few lines before the errors started and the section that
the script is basically zombified at.
Maybe you can see some correlation that I can't.
[Wed Jul 16 16:55:54 2003][32072] cuteftp_flaws.nasl (process 32402)
finished its job in 0.216 seconds
[Wed Jul 16 16:55:54 2003][32072] user depriest : launching
smb_reg_pdc.nasl against 10.226.57.1 [32403]
[Wed Jul 16 16:55:55 2003][32072] smb_reg_pdc.nasl (process 32403)
finished its job in 0.196 seconds
[Wed Jul 16 16:55:55 2003][32072] user depriest : launching
smb_nt_ms01-008.nasl against 10.226.57.1 [32404]
[Wed Jul 16 16:55:55 2003][32072] user depriest : Not launching
ddicgi.nasl against 10.226.57.1 none of the required tcp ports are open
(this is not an error)
[Wed Jul 16 16:55:55 2003][32072] user depriest : Not launching
DDI_warftpd_user_overflow.nasl against 10.226.57.1 none of the required
tcp ports are open (this is not an error)
[Wed Jul 16 16:55:55 2003][32072] user depriest : Not launching
iis5_isapi_printer.nasl against 10.226.57.1 none of the required tcp
ports are open (this is not an error)
[Wed Jul 16 16:55:55 2003][32072] user depriest : Not launching
directoryphp.nasl against 10.226.57.1 none of the required tcp ports are
open (this is not an error)
[Wed Jul 16 16:55:55 2003][32072] user depriest : Not launching
cisco_ids_manager_detect.nasl against 10.226.57.1 none of the required
tcp ports are open (this is not an error)
[Wed Jul 16 16:55:55 2003][32072] user depriest : Not launching
perl_browseable.nasl against 10.226.57.1 none of the required tcp ports
are open (this is not an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [Interrupted system call]
[Wed Jul 16 16:56:00 2003][32072] user depriest : Not launching
ultraseek_detect.nasl against 10.226.57.1 none of the required tcp
ports are open (this is not an error)
[Wed Jul 16 16:56:05 2003][32072] smb_nt_ms01-008.nasl (process 32404)
finished its job in 10.183 seconds
[Wed Jul 16 16:56:05 2003][32072] user depriest : launching
leapftp_overflow.nasl against 10.226.57.1 [32406]
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[Wed Jul 16 16:56:10 2003][32072] user depriest : Not launching
shoutcast_version.nasl against 10.226.57.1 none of the required tcp
ports are open (this is not an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [Interrupted system call]
[Wed Jul 16 16:56:15 2003][32072] user depriest : Not launching
generic_WEB-INF.nasl against 10.226.57.1 none of the required tcp ports
are open (this is not an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[Wed Jul 16 16:56:20 2003][32072] user depriest : Not launching
badblue_directory_traversal.nasl against 10.226.57.1 none of the
required tcp ports are open (this is not an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[Wed Jul 16 16:56:25 2003][32072] user depriest : Not launching
oracle9i_mod_plsql_traversal.nasl against 10.226.57.1 none of the
required tcp ports are open (this is not an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[Wed Jul 16 16:56:30 2003][32072] user depriest : Not launching
avengers_news_system_command_execution.nasl against 10.226.57.1 none of
the required tcp ports are open (this is not an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[Wed Jul 16 16:56:35 2003][32072] user depriest : Not launching
rlogin_froot.nasl against 10.226.57.1 none of the required tcp ports are
open (this is not an error)
[Wed Jul 16 16:56:40 2003][32072] user depriest : Not launching
netcommerce_sql.nasl against 10.226.57.1 none of the required tcp ports
are open (this is not an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[Wed Jul 16 16:56:45 2003][32072] user depriest : Not launching
snitz_forums_2000_xss.nasl against 10.226.57.1 none of the required tcp
ports are open (this is not an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[Wed Jul 16 16:56:50 2003][32072] user depriest : Not launching
cvs_detect.nasl against 10.226.57.1 none of the required tcp ports are
open (this is not an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[Wed Jul 16 16:56:55 2003][32072] leapftp_overflow.nasl (process 32406)
finished its job in 50.361 seconds
[Wed Jul 16 16:56:55 2003][32072] user depriest : launching
smb_reg_trojan_paths.nasl against 10.226.57.1 [32408]
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[Wed Jul 16 16:57:02 2003][32072] user depriest : Not launching
count_cgi.nasl against 10.226.57.1 none of the required tcp ports are
open (this is not an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [Interrupted system call]
[Wed Jul 16 16:57:07 2003][32072] user depriest : Not launching
php3_path_disclosure.nasl
against 10.226.57.1 none of the required tcp ports are open (this is not
an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
Time Passes
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[Wed Jul 16 16:58:28 2003][32072] user depriest : Not launching
frontpage.nasl against 10.226.57.1 none of the required tcp ports are
open (this is not an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[Wed Jul 16 16:58:33 2003][32072] user depriest : Not launching
consolehelp.nasl against 10.226.57.1 none of the required tcp ports are
open (this is not an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[Wed Jul 16 16:58:38 2003][32072] user depriest : Not launching
finger_backdoor.nasl against 10.226.57.1 none of the required tcp ports
are open (this is not an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[Wed Jul 16 16:58:43 2003][32072] user depriest : Not launching
mailmaxweb_path_disclosure.nasl against 10.226.57.1 none of the required
tcp ports are open (this is not an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[Wed Jul 16 16:58:48 2003][32072] user depriest : Not launching
DDI_WhatsUp_Default.nasl against 10.226.57.1 none of the required tcp
ports are open (this is not an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[Wed Jul 16 16:58:53 2003][32072] user depriest : Not launching
iis_bdir.nasl against 10.226.57.1 none of the required tcp ports are
open (this is not an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[Wed Jul 16 16:58:58 2003][32072] user depriest : Not launching
sendmail_mime_overflow2.nasl against 10.226.57.1 none of the required
tcp ports are open (this is not an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[Wed Jul 16 16:59:03 2003][32072] user depriest : Not launching
tripwire_webpage.nasl against 10.226.57.1 none of the required tcp ports
are open (this is not an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[Wed Jul 16 16:59:08 2003][32072] smb_nt_ms02-026.nasl (process 32415)
finished its job in 60.192 seconds
[Wed Jul 16 16:59:08 2003][32072] user depriest : launching
smb_reg_hklm.nasl against 10.226.57.1 [32416]
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[Wed Jul 16 16:59:13 2003][32072] user depriest : Not launching
args_bat.nasl against 10.226.57.1 none of the required tcp ports are
open (this is not an error)
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [Interrupted system call]
[Wed Jul 16 16:59:18 2003][32072] smb_reg_hklm.nasl (process 32416)
finished its job in 10.190 seconds
[Wed Jul 16 16:59:18 2003][32072] user depriest : launching
smb_localusers_disabled.nasl against 10.226.57.1 [32417]
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
[32072] comm_send_status(7): receiving ACK failed! Maybe we should exit
now [No such file or directory]
