Re: dns_fingerprint.nasl - silent exit after 3 timeouts, why?

Renaud Deraison <[email protected]>
Newsgroups gmane.comp.security.nessus.devel
Message-ID <[email protected]>
On Tue, Jul 20, 2004 at 04:57:11PM +0200, Martin Ma?ok wrote:
> I have come across some DNS server (probably LAN Suite 602 on Windows server,
> but who knows...) that was not fingerprinted by Nessus, nor it was a message in
> the report that it couldn't be fingerprinted etc.
> 
> So I increased the magic constant "3" in dns_fingerprint.nasl:
> 
>     54  function probe(message)
>     ...    
>     62   if ( ! r ) { timeouts ++; if (timeouts > 3) exit(0);  return "t:";}
>                                                   ^
> and the result is:
> 
> 1:t:t:t:t:t:t:t:0X:0X:t:0X:15X:0Z0X:0X:0X:t:t:t:0X:0X:4:t:
> 
> So the magic constant "3" should be upgraded to "12" ?

It should, but in your case you end up with a plugin with takes nearly
one minute to be executed, for a result that is not really used in the
rest of the scan. 

So this plugin is a perfect example of a speed vs. accuracy conflict we
often hit.


				-- Renaud
_______________________________________________
Nessus-devel mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus-devel
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.