Re: dns_fingerprint.nasl - silent exit after 3 timeouts, why?
Pavel Kankovsky <[email protected]>
| Newsgroups | gmane.comp.security.nessus.devel |
|---|---|
| Message-ID | <[email protected]> |
On Tue, 20 Jul 2004, Martin Mačok wrote:
> I have come across some DNS server (probably LAN Suite 602 on Windows
> server, but who knows...) that was not fingerprinted by Nessus, nor it
> was a message in the report that it couldn't be fingerprinted etc.
I think the most annoying part of this was the fact the plugin exited
silently (and this is a "feature" of many other plugins). I think all
those occurences of exit(0) should be replaced with
exit("unable to open connection") or exit("too many timeouts") etc.
and Nessus should write those messages to its log (and perhaps,
optionally, include them in the report).
On Wed, 21 Jul 2004, Renaud Deraison wrote:
> Not really. If you consider it acceptable for every plugin to take over
> two minutes, then a scan can basically take several days per host.
This depends on the level of parallelism. In fact, the plugin in question
itself is highly parallelizable because it makes no sense to wait several
seconds until one query times out before you send another query.
--Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."
_______________________________________________
Nessus-devel mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus-devel