> 
> On Wed, Nov 10, 2004 at 10:32:56AM -0600, Sawall, Christopher L wrote:
> 
> > [Wed Nov 10 08:33:55 2004][21969] user amerenscan : session will be 
> > saved as
> > 
> 
> Would you mind 

Mind what?  Sorry...

> 
> > As you can see, the scan started at 8:33.  What the log is 
> not showing 
> > is that at 9:21, I got an error. the  title was just 
> "error" and the 
> > message was "nessus returned an empty report".  I then 
> logged out of 
> > the client and quit the application.
> ...
> > [25813] plug_set_key:internal_send(4)['3 
> ConnectTimeout/TCP/381=1;']: 
> > Broken pipe
> 
> Looks like the nessusd process is crashing.  Can you run 
> strace on it after you start another scan? That might suggest 
> the cause of the problem. 

I did this, but data is flying past at an unbelievable rate.  Here is a
small sample:

read(3, "[EMAIL PROTECTED]'\255C\354Z\375\35\340\225? z\261f\316"...,
784) = 784
select(4, [3], [3], NULL, {1, 0})       = 2 (in [3], out [3], left {1,
0})
read(3, "\27\3\1\2\220", 5)             = 5
read(3, "\354HG\36dR\335^M\205\350\356\272\360\356)w\3429\7iW)\246"...,
656) = 656
select(4, [3], [3], NULL, {1, 0})       = 2 (in [3], out [3], left {1,
0})
read(3, "\27\3\1\2\300", 5)             = 5
read(3, "1\"\"v\275\333t\360$l\340\223\267u\233\252Bn\346\240\234"...,
704) = 704
brk(0)                                  = 0x9d18000
brk(0x9d39000)                          = 0x9d39000
brk(0)                                  = 0x9d39000
brk(0)                                  = 0x9d39000
brk(0x9d38000)                          = 0x9d38000
brk(0)                                  = 0x9d38000
select(4, [3], [3], NULL, {1, 0})       = 2 (in [3], out [3], left {1,
0})
read(3, "\27\3\1\1 ", 5)                = 5
read(3, "=f~h6\310\2766\361\27\237}H\310\305L;32~N\f`5\266\302G"...,
288) = 288
select(4, [3], [3], NULL, {1, 0})       = 2 (in [3], out [3], left {1,
0})
read(3, "\27\3\1\4\360", 5)             = 5
read(3, "\274z\261\213R\317\2333f\250\367y\22\210osfDo\323\314#"...,
1264) = 1264
select(4, [3], [3], NULL, {1, 0})       = 2 (in [3], out [3], left {1,
0})
read(3, "\27\3\1\2P", 5)                = 5
read(3, "\247.\31\312|\305\233\210^\305)\v\370\3\325C)Ne\21z\27"...,
592) = 592

Should I be looking for anything imparticular.  It seemed to just keep
going on and on and on.

> 
> Also, would you mind sending the session data 
> (/usr/local/var/nessus/users/amerenscan/sessions/20041110-083355-data)

This file exists, but contains no data at all.

> and the KB 
> (/usr/local/var/nessus/users/amerenscan/kbs/secmon1, I think)?

This file does not even exist.  There are other files for servers I've
previously scanned, but they were all live.

Let me know what else you need.

Thanks,
Chris

*******************************
The information contained in this message may be privileged and/or confidential 
and 
protected from disclosure. If the reader of this message is not the intended 
recipient, 
or an employee or agent responsible for delivering this message to the intended 
recipient, 
you are hereby notified that any dissemination, distribution or copying of this 
communication is strictly prohibited. Note that any views or opinions presented 
in this 
message are solely those of the author and do not necessarily represent those 
of Ameren. 
All emails are subject to monitoring and archival. Finally, the recipient 
should check 
this message and any attachments for the presence of viruses. Ameren accepts no 
liability 
for any damage caused by any virus transmitted by this email. If you have 
received this in 
error, please notify the sender immediately by replying to the message and 
deleting the 
material from any computer. Ameren Corporation 
*******************************


_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to