No, that message itself was not that annoying. However, that was the only error message I have been able to locate as a sybase backup process crashed on 4 systems while the scan was running. I am trying to figure out how the scan caused the crash. We are pretty certain it was the scan as the process has never crashed before and this is the first time I have run this scan on these systems. The times all match up as well.
Adrian -----Original Message----- From: Michel Arboi [mailto:[EMAIL PROTECTED]] Sent: Thu 9/5/2002 11:24 AM To: [EMAIL PROTECTED] Cc: Subject: Re: Which plugin would cause this? "Mink, Adrian (QB8692)" <[EMAIL PROTECTED]> writes: > While running a scan against some Sun systems, one of them generated > this error several hundred times. "inetd: [ID 388736 daemon.error] > execv /usr/lib/dcs: No such file or directory" Just curious: on which port is this service supposed to be? > Can someone help me figure out which plugin may have caused this? As there is no answer (because there is no program to answer), the port is listed in "Services/unknown". Every script that reads this key will access the missing service. i.e. miscflood.nasl, mstream_handler.nasl, nessus_detect.nasl, PC_anywhere_tcp.nasl, subseven.nasl The scripts that loop on every open port will acess it too: check_ports.nasl, port_shell_execution.nasl You can get rid of the first category by enabling the experimental "TCP wrapper detector" in nessus-plugins/plugins/find_service/find_service.c Replace "#undef DETECT_WRAPPED_SVC" by "#define DETECT_WRAPPED_SVC" and set a value > 0 in the "Wrapped service read timeout" Pref. NB : - if the timeout is too short, some services may be detected as "wrapped". - a long timeout will make find_service much slower. BTW, is the message from inetd so annoying? - [EMAIL PROTECTED]: general discussions about Nessus. * To unsubscribe, send a mail to [EMAIL PROTECTED] with "unsubscribe nessus" in the body. - [EMAIL PROTECTED]: general discussions about Nessus. * To unsubscribe, send a mail to [EMAIL PROTECTED] with "unsubscribe nessus" in the body.
