Hi team, i am using openvas7 - lastest release : Libraries 7.0.10 <http://wald.intevation.org/frs/download.php/2031/openvas-libraries-7.0.10.tar.gz> / Scanner 4.0.7 <http://wald.intevation.org/frs/download.php/2101/openvas-scanner-4.0.7.tar.gz> /Manager 5.0.11 <http://wald.intevation.org/frs/download.php/2105/openvas-manager-5.0.11.tar.gz>
i use pread command to run external tool in my nasl plugin. but it seems that there is a default timeout on pread command . My investigation show that when the external process run more than 120 seconds, plugin die ... i assume this because suddenly the ppid of the external-tool is set to 1, the tools is still running, but got no more parent process to catch its stdout :-( i write a specific plugin to validate this analyse : when called for port X, my plugin: add an entry tempo_started/X in kb call external_tools that sleep X seconds and then write a message when pread catch the message , plugin add an entry tempo_ended/X in kb i launch against target that have port 80, 443, 8080 , 8081 opens ... cat kb show : 1446120153 3 tempo_started/8080=1 1446120273 3 tempo_started/443=1 1446120393 3 tempo_started/80=1 1446120473 3 tempo_ended/80=1 1446120473 3 tempo_start/8081=1 and log : private/tempo.nasl (process 15954) finished its job in 440.060 seconds ps command show that 3 external_tools process are still running .... external_tools 443 external_tools 8080 external_tools 8081 analyse this : 120s after the start of external_tools 8080, plugin is relaunch with external_tools 443 120s after the start of external_tools 443, plugin is relaunch with external_tools 80 that END 80s later (great) .... then external_tools 8081 is launch ....but never end like, 443, and 8080 we got 443, 8080, 8081 that runs 120s and 80 thats run 80 s 120+120+120+80 = 440 seconds ... as write in log so at the end , how we can modify this pread timeout ???? -- Sebastien Aucouturier , R&D Manager and Senior Technologist, <http://secludit.com/> Amazon WS Solutions Provider : http://www.aws-partner-directory.com/PartnerDirectory/PartnerDetail?Name=SecludIT HP Cloud Security Partner : https://marketplace.hpcloud.com/secludit-elastic-detector Agence Toulouse GSM: 06.20.60.77.24
_______________________________________________ Openvas-plugins mailing list [email protected] https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-plugins
