It is not clear to me what, if anyting, the nessus-devel list is being used for so please feel free to cluebat me if this email should have been sent to nessus-devel.
In ping_host.nasl:
ip = forge_ip_packet(ip_v:4, ip_hl:5, ip_tos:0, ip_off:0,ip_len:20,
ip_p:IPPROTO_ICMP, ip_id:1235, ip_ttl:0x40,
ip_src:this_host());
icmp = forge_icmp_packet(ip:ip, icmp_type:8, icmp_code:0,
icmp_seq: 1, icmp_id:1);
j = 0;
filter = string("ip and src host ", get_host_ip());
while(j < retry)
{
rep = send_packet(pcap_active:TRUE,
pcap_filter:filter,
pcap_timeout:1,
icmp);
if(rep){
exit(0);
}
j = j+1;
}
Is it not possible that the ICMP pkt that is received could be a Host
Unreachable or Network Unreachable and thus the script could get a false
positive on whether or not the host is up because it checks only for the
presence of a 'reply' packet and not whether:
1) The pkt is an ICMP packet.
2) The pkt is an Echo Reply?
--
---
Nathan Valentine - [EMAIL PROTECTED]
Jabber: NRVesKY AIM: NRVesKY ICQ: 39023424
msg00097/pgp00000.pgp
Description: PGP signature
