Bugs item #1168, was opened at 2009-11-09 12:09 Status: Open Priority: 3 Submitted By: Michael Meyer (mime) Assigned to: Nobody (None) Summary: ping_host.nasl Architecture: None Resolution: None Severity: normal Version: None Component: openvas-plugins Operating System: All Product: OpenVAS Hardware: All URL:
Initial Comment: Michael Wiegand reported a problem with ping_host.nasl while scanning a Windows XP Host. The Windows XP host is up and a ping succeed but ping_host.nasl mark this host as dead. ping_host.nasl using two different ways to try to detect if a host is up. 1: send a ICMP (ICMP_ECHO_REQUEST) by using send_packet() with active pcap filter. 2: tcp_ping() from openvas-libraries/nasl/nasl_packet_forgery.c. tcp_ping() using pcap as well. At the moment this problem was only seen if the openvas-scanner is running on a XEN-Node. While scanning a few hundred hosts, a lot of plugins, which make use of send_packet(), are killed by openvas-scanner because timeout was reached. See the list at http://pastebin.com/m905b2ea. This openvas-scanner also runs on a XEN-Node. So, there maybe exist a problem with openvas+pcap+xen. ping_host.nasl has now been modified, to not longer mark hosts as dead by default. You must explicitly enable this feature. ---------------------------------------------------------------------- You can respond by visiting: http://wald.intevation.org/tracker/?func=detail&atid=220&aid=1168&group_id=29 _______________________________________________ Openvas-devel mailing list Openvas-devel@wald.intevation.org http://lists.wald.intevation.org/mailman/listinfo/openvas-devel
