On 3/10/06, Renaud Deraison <[EMAIL PROTECTED]> wrote:

On Mar 10, 2006, at 4:17 PM, Don Maxwell wrote:

> After upgrading to Nessus 2.2.7 on my Solaris box, my network
> scanning scripts have failed.  It used to be, before the upgrade,
> that I could set up a "targets-file" for use from a command line
> scan that would look something like this:
>
> However, in 2.2.7, only the first network is scanned and it appears
> that no attempt is made to scan the nets after the frist line.

Is there anything mentionned in nessusd.messages ?

A more thorough search of the log, which I had previously only been looking at the begining and end,  shows some very interesting events:  (actual IP addrs masked)
# grep "Mar 10" /usr/local/var/nessus/nessusd.messages  | more
[Fri Mar 10 09:03:14 2006][27588] connection from 127.0.0.1
[Fri Mar 10 09:03:14 2006][9227] Client requested protocol version 12.
[Fri Mar 10 09:03:14 2006][9227] successful login of batch from 127.0.0.1
[Fri Mar 10 09:06:39 2006][9227] user batch starts a new scan. Target(s) : x.x.148.0/24,x.x.149.0/24,x.x.150.0/24,113.1
28.151.0/24, with max_hosts = 100 and max_checks = 3
[Fri Mar 10 09:06:39 2006][9227] user batch : testing x.x.148.0 (x.x.148.0) [9776]
[Fri Mar 10 09:06:39 2006][9227] user batch : testing x.x.148.1 (x.x.148.1) [9778]
[Fri Mar 10 09:06:39 2006][9227] user batch : testing x.x.148.2 (x.x.148.2) [9779]
[Fri Mar 10 09:06:40 2006][9227] user batch : testing x.x.148.3 (x.x.148.3) [9781]
[Fri Mar 10 09:06:40 2006][9227] user batch : testing x.x.148.4 (x.x.148.4) [9782]
[Fri Mar 10 09:06:40 2006][9227] user batch : testing x.x.148.5 (x.x.148.5) [9786]
[Fri Mar 10 09:06:40 2006][9227] user batch : testing x.x.148.6 (x.x.148.6) [9787]
[Fri Mar 10 09:06:40 2006][9227] user batch : testing x.x.148.7 (x.x.148.7) [9790]
[Fri Mar 10 09:06:40 2006][9227] user batch : testing x.x.148.8 (x.x.148.8) [9791]
[Fri Mar 10 09:06:41 2006][9227] user batch : testing x.x.148.9 (x.x.148.9) [9792]
....

[Fri Mar 10 09:06:53 2006][9227] user batch : testing x.x.148.99 (x.x.148.99) [9940]
[Fri Mar 10 09:06:55 2006][9921] Error : could not fork ! Error : Not enough space
[Fri Mar 10 09:06:55 2006][9921] fork() failed - sleeping 1 seconds (Not enough space)
[Fri Mar 10 09:06:55 2006][9889] Error : could not fork ! Error : Not enough space
[Fri Mar 10 09:06:55 2006][9889] fork() failed - sleeping 1 seconds (Not enough space)
[Fri Mar 10 09:06:55 2006][9837] Error : could not fork ! Error : Not enough space
[Fri Mar 10 09:06:55 2006][9837] fork() failed - sleeping 1 seconds (Not enough space)
[Fri Mar 10 09:06:55 2006][9827] Error : could not fork ! Error : Not enough space
[Fri Mar 10 09:06:55 2006][9827] fork() failed - sleeping 1 seconds (Not enough space)
[Fri Mar 10 09:06:55 2006][9848] Error : could not fork ! Error : Not enough space
...  (LOTS of these)
[Fri Mar 10 09:35:01 2006][16572] fork() failed - sleeping 2 seconds (Not enough space)
[Fri Mar 10 09:35:01 2006][16601] fork() failed - sleeping 2 seconds (Not enough space)
[Fri Mar 10 09:35:01 2006][16573] fork() failed - sleeping 2 seconds (Not enough space)
[Fri Mar 10 09:35:01 2006][16617] Error : could not fork ! Error : Not enough space
[Fri Mar 10 09:35:01 2006][16541] Error : could not fork ! Error : Not enough space
[Fri Mar 10 09:35:01 2006][16541] fork() failed - sleeping 2 seconds (Not enough space)
[Fri Mar 10 09:35:01 2006][16588] fork() failed - sleeping 2 seconds (Not enough space)
[Fri Mar 10 09:35:01 2006][16610] fork() failed - sleeping 3 seconds (Not enough space)
[Fri Mar 10 09:35:01 2006][16582] Error : could not fork ! Error : Not enough space
[Fri Mar 10 09:35:01 2006][16582] fork() failed - sleeping 2 seconds (Not enough space)
[Fri Mar 10 09:35:01 2006][16555] Error : could not fork ! Error : Not enough space
....
[Fri Mar 10 09:37:11 2006][18109] Error : could not fork ! Error : Not enough space
[Fri Mar 10 09:37:11 2006][18109] fork() failed - sleeping 3 seconds (Not enough space)
[Fri Mar 10 09:37:11 2006][18167] fork() failed - sleeping 4 seconds (Not enough space)
[Fri Mar 10 09:37:11 2006][18391] Finished testing x.x.148.188. Time : 4.35 secs
[Fri Mar 10 09:37:11 2006][18195] Finished testing x.x.148.170. Time : 32.64 secs
[Fri Mar 10 09:37:11 2006][18165] Finished testing x.x.148.149. Time : 51.59 secs
[Fri Mar 10 09:37:11 2006][18203] Finished testing x.x.148.178. Time : 32.51 secs
[Fri Mar 10 09:37:11 2006][18149] Finished testing x.x.148.143. Time : 55.79 secs
[Fri Mar 10 09:37:11 2006][18061] Finished testing x.x.148.117. Time : 66.33 secs
[Fri Mar 10 09:37:11 2006][18200] Finished testing x.x.148.175. Time : 32.86 secs
[Fri Mar 10 09:37:11 2006][18161] Finished testing x.x.148.145. Time : 52.18 secs
[Fri Mar 10 09:37:11 2006][18197] Finished testing x.x.148.172. Time : 33.17 secs
[Fri Mar 10 09:37:11 2006][18194] Finished testing x.x.148.169. Time : 33.31 secs
[Fri Mar 10 09:37:11 2006][18162] Finished testing x.x.148.146. Time : 52.11 secs
[Fri Mar 10 09:37:11 2006][18128] Finished testing x.x.148.136. Time : 58.90 secs
[Fri Mar 10 09:37:11 2006][18196] Finished testing x.x.148.171. Time : 33.32 secs
[Fri Mar 10 09:37:11 2006][18099] Finished testing x.x.148.127. Time : 61.84 secs
[Fri Mar 10 09:37:11 2006][18137] Finished testing x.x.148.139. Time : 57.89 secs
[Fri Mar 10 09:37:12 2006][18106] Finished testing x.x.148.129. Time : 61.92 secs
[Fri Mar 10 09:37:12 2006][18178] Finished testing x.x.148.153. Time : 35.32 secs
[Fri Mar 10 09:37:12 2006][18135] Process 18221 seems to have died too early
[Fri Mar 10 09:37:12 2006][18135] Finished testing x.x.148.138. Time : 58.83 secs
[Fri Mar 10 09:37:12 2006][18141] Finished testing x.x.148.140. Time : 57.97 secs
[Fri Mar 10 09:37:12 2006][18390] Finished testing x.x.148.187. Time : 5.42 secs
[Fri Mar 10 09:37:12 2006][18064] Finished testing x.x.148.118. Time : 66.94 secs
....


Maybe the issue is less with the targets-file and more with memory or something?

The rc file in use starts off with this:
# This file was automagically created by nessus
nessusd_host = localhost
nessusd_user = batch
paranoia_level = 1
begin(SCANNER_SET)
 10180 = no
 10335 = no
 10336 = no
 10796 = no
 10841 = no
 11219 = no
 11840 = no
 14272 = no
 14274 = no
 14259 = yes
end(SCANNER_SET)
 
begin(SERVER_PREFS)
 max_hosts = 100
 max_checks = 3
 log_whole_attack = no
 report_killed_plugins = no
 cgi_path = /cgi-bin:/scripts
 port_range = 445
 optimize_test = yes
 language = english
 per_user_base = /n/NESSUS_1_2_5//var/nessus/users
 checks_read_timeout = 15
 delay_between_tests = 1
 non_simult_ports = 139
 plugins_timeout = 30
 safe_checks = no
 auto_enable_dependencies = yes
 use_mac_addr = no
 save_knowledge_base = no
 kb_restore = no
 >  >  kb_dont_replay_scanners = no
 kb_dont_replay_info_gathering = no
 kb_dont_replay_attacks = no
 kb_dont_replay_denials = no
 kb_max_age = 864000
 plugin_upload = no
 plugin_upload_suffixes = .nasl
 admin_user = root
 save_session = no
 save_empty_sessions = no
 host_expansion = ip
 ping_hosts = no
 reverse_lookup = no
 detached_scan = no
 continuous_scan = no
 unscanned_closed = no
 diff_scan = no
 max_threads = 40
 track_iothreads = yes
 cookie_logpipe_suptmo = 2
end(SERVER_PREFS)
 
begin(SERVER_INFO)
 server_info_nessusd_version = 2.2.7
 server_info_libnasl_version = 2.2.7
 server_info_libnessus_version = 2.2.7
 server_info_thread_manager = fork
 server_info_os = SunOS
 server_info_os_version = 5.8
end(SERVER_INFO)
 
begin(RULES)
end(RULES)


Any ideas where I should be looking?

Thanks!
   --Don

_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to