James, On Wed, Jun 29, 2011 at 8:01 PM, james bailey <[email protected]> wrote: > Hello All, > > I have Ubuntu Natty x86_64 > w3af version 1.1 > revision: 4347 > python: 2.7.1 > target: jboss-web 2.1.3 online shopping catalog thing > I can issue a wget to the server on the relevant port before the scan begins > > I started a scan using profile OWASP_TOP10 and the scan finishes in 55 > minutes 23 seconds but the **IMPORTANT** notice reads: > > "The following error was detected by w3af and couldn't be resolved: Name or > service not known"
My guess is that one of these two things happen: - For some reason your DNS server stopped answering our queries and thus we had to stop with that error - For some reason, w3af was trying to request a URL with a non-existing domain, and failed when trying to perform requests to it A couple of things you can do: - Set the target domain in your /etc/hosts - Send us more detailed logs (maybe the output of running: grep "Name or service not known" output-w3af.txt -C150) One important question to ask is... are you able to reproduce this every time you scan that website? > > I redirected all of the terminal output to a file and examined that there > are a number of errors regarding "IncompleteRead" but w3af doesn't stop on > those errors. I'm hoping that someone can help me understand how to identify > what request caused the "name or service not known" error or how to better > debug this error. > > Thanks in advance > James > > ------------------------------------------------------------------------------ > All of the data generated in your IT infrastructure is seriously valuable. > Why? It contains a definitive record of application performance, security > threats, fraudulent activity, and more. Splunk takes this data and makes > sense of it. IT sense. And common sense. > http://p.sf.net/sfu/splunk-d2d-c2 > _______________________________________________ > W3af-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/w3af-users > > -- Andrés Riancho Director of Web Security at Rapid7 LLC Founder at Bonsai Information Security Project Leader at w3af ------------------------------------------------------------------------------ All of the data generated in your IT infrastructure is seriously valuable. Why? It contains a definitive record of application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-d2d-c2 _______________________________________________ W3af-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/w3af-users
