More information:: In response to the probe "0x00, 0x00,0x27, 0x29", the port in question returns "0x00, 0x00", which is less than the minimum of 4 bytes requested by the script. If I run the script alone: # openvas-nasl -X -t <target> -d gb_sap_router_detect.nasl And, on the target, I run: $ ncat -kl 3299 Then the script times out after 5 seconds. But if I press "enter" on ncat when probed, the script hangs forever. I think this is expected.
When running from OpenVAS 7/Greenbone using the "Full and fast" configuration, the TCP connection is terminated after 120 seconds. I don't know why this times out -- the "plugins_timeout" is 320 seconds. When running on OpenVAS 8, it never times out, and needs to be stopped manually. I have tcpdumps of both scans, but it doesn't tell much beyond the above. I'll see if I can find a simple way to reproduce this. -----Original Message----- From: Openvas-discuss [mailto:[email protected]] On Behalf Of Michael Meyer Sent: Tuesday, April 14, 2015 12:03 AM To: [email protected] Subject: Re: [Openvas-discuss] OpenVAS 8: scans not finishing *** Kent Fritz wrote: > Did the default timeout for "recv" get changed? I find it's stuck for > hours on gb_sap_router_detect.nasl probing a port that's open but > probably not responding. I ran the same scan previously on OpenVAS 7 > with no problems. > > If this doesn't sound familiar, I'll run some more experiments and > gather some captures. I've never heard about this. Yes, please run some more tests or let me know how i can reproduce this. Micha -- Michael Meyer OpenPGP Key: 0xAF069E9152A6EFA6 http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner _______________________________________________ Openvas-discuss mailing list [email protected] https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss ________________________________ This e-mail and any attachments are confidential. If it is not intended for you, please notify the sender, and please erase and ignore the contents. _______________________________________________ Openvas-discuss mailing list [email protected] https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
