Re: dns_fingerprint.nasl - silent exit after 3 timeouts, why?
Renaud Deraison <[email protected]>
| Newsgroups | gmane.comp.security.nessus.devel |
|---|---|
| Message-ID | <[email protected]> |
On Tue, Jul 20, 2004 at 04:57:11PM +0200, Martin Ma?ok wrote:
> I have come across some DNS server (probably LAN Suite 602 on Windows server,
> but who knows...) that was not fingerprinted by Nessus, nor it was a message in
> the report that it couldn't be fingerprinted etc.
>
> So I increased the magic constant "3" in dns_fingerprint.nasl:
>
> 54 function probe(message)
> ...
> 62 if ( ! r ) { timeouts ++; if (timeouts > 3) exit(0); return "t:";}
> ^
> and the result is:
>
> 1:t:t:t:t:t:t:t:0X:0X:t:0X:15X:0Z0X:0X:0X:t:t:t:0X:0X:4:t:
>
> So the magic constant "3" should be upgraded to "12" ?
It should, but in your case you end up with a plugin with takes nearly
one minute to be executed, for a result that is not really used in the
rest of the scan.
So this plugin is a perfect example of a speed vs. accuracy conflict we
often hit.
-- Renaud
_______________________________________________
Nessus-devel mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus-devel