Ok, it's crystal clear !

-----Message d'origine-----
De : Andres Riancho [mailto:andres.rian...@gmail.com] 
Envoyé : mardi 19 mars 2013 17:18
À : POUGET Laurent
Cc : w3af-users@lists.sourceforge.net
Objet : Re: [W3af-users] w3af interruption

POUGET,

On Tue, Mar 19, 2013 at 1:08 PM, POUGET Laurent 
<laurent.pou...@carboatmedia.fr> wrote:
> Andres,
>
> I have run w3af with threading2.
> No problems at his time, but multi-threading seems weird. Only one thread is 
> at full capacity, others have very low cpu consumption (16 core server).

Well, in python threading [0] is different from other programming languages. 
Maybe you were expecting to see multiprocessing [1], where more than one 
process is spawned and they all consume resources.
Please see the note on the global interpreter lock in [1].

One of our next steps is going to focus on multiprocessing [2][3][4], in order 
to leverage all your 15 CPUs which are idle now :) Also, experimentation with 
other programming paradigms such as gevent + requests [5]

[0] http://docs.python.org/2.7/library/threading.html
[1] http://docs.python.org/2.7/library/multiprocessing.html
[2] https://github.com/andresriancho/w3af/issues/100
[3] https://github.com/andresriancho/w3af/issues/28
[4] https://github.com/andresriancho/w3af/issues/24
[5] https://github.com/kennethreitz/grequests

> Thx for your attention,
>
> Laurent
>
> -----Message d'origine-----
> De : Andres Riancho [mailto:andres.rian...@gmail.com] Envoyé : lundi 
> 18 mars 2013 18:57 À : POUGET Laurent Cc : 
> w3af-users@lists.sourceforge.net Objet : Re: [W3af-users] w3af 
> interruption
>
> Laurent,
>
> On Mon, Mar 18, 2013 at 11:42 AM, POUGET Laurent 
> <laurent.pou...@carboatmedia.fr> wrote:
>> Running last stable version of w3af (git -> master)
>
> If interested, I recommend you join our beta-testers program. The
> threading2 branch needs testers and is very much stable at the moment.
> http://w3af.org/beta-testers-wanted
>
>> My config file :
>>
>> [profile]
>>...
>> [output.htmlFile]
>
> Sadly, this output plugin only writes to the output file when done. So if you 
> kill the w3af process now, your (potential) results will be lost. You might 
> use text_file for storing any vulns as they are found.
>
> Regards,
>>
>> -----Message d'origine-----
>> De : Andres Riancho [mailto:andres.rian...@gmail.com] Envoyé : lundi
>> 18 mars 2013 15:16 À : POUGET Laurent Cc :
>> w3af-users@lists.sourceforge.net Objet : Re: [W3af-users] w3af 
>> interruption
>>
>> Laurent,
>>
>> On Mon, Mar 18, 2013 at 10:41 AM, POUGET Laurent 
>> <laurent.pou...@carboatmedia.fr> wrote:
>>> Hi,
>>>
>>>
>>>
>>> I have launched w3af with command line :
>>>
>>>
>>>
>>> ./w3af_console -P profiles/my_profile
>>>
>>>
>>>
>>> The job has been running for more than 2 days and I would like to 
>>> stop it before the end. Will I have a partial report ?
>>
>> Depends on what my_profile contains. If the profile was configured to have 
>> an output plugin which writes stuff to a file, most likely yes.
>> Please share your output configuration. Also, could you please tell us more 
>> about your w3af version, the site you were scanning, why you think it took 
>> so long, etc.?
>>
>>>
>>>
>>> Thanks,
>>>
>>>
>>>
>>>
>>>
>>> ________________________________
>>>
>>>
>>>
>>> Laurent Pouget
>>>
>>> Ingénieur étude et développement
>>>
>>> Tel : 01.84.95.11.20
>>>
>>>
>>>
>>> Car & Boat Media
>>>
>>> 22 Rue Joubert  75009 Paris
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> --------------------------------------------------------------------
>>> -
>>> -
>>> -------- Everyone hates slow websites. So do we.
>>> Make your web apps faster with AppDynamics Download AppDynamics Lite 
>>> for free today:
>>> http://p.sf.net/sfu/appdyn_d2d_mar
>>> _______________________________________________
>>> W3af-users mailing list
>>> W3af-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/w3af-users
>>>
>>
>>
>>
>> --
>> Andrés Riancho
>> Project Leader at w3af - http://w3af.org/ Web Application Attack and 
>> Audit Framework
>> Twitter: @w3af
>> GPG: 0x93C344F3
>>
>>
>>
>> ---------------------------------------------------------------------
>> -
>> -------- Everyone hates slow websites. So do we.
>> Make your web apps faster with AppDynamics Download AppDynamics Lite 
>> for free today:
>> http://p.sf.net/sfu/appdyn_d2d_mar
>> _______________________________________________
>> W3af-users mailing list
>> W3af-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/w3af-users
>
>
>
> --
> Andrés Riancho
> Project Leader at w3af - http://w3af.org/ Web Application Attack and 
> Audit Framework
> Twitter: @w3af
> GPG: 0x93C344F3
>
>
>
> ----------------------------------------------------------------------
> -------- Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics Download AppDynamics Lite 
> for free today:
> http://p.sf.net/sfu/appdyn_d2d_mar
> _______________________________________________
> W3af-users mailing list
> W3af-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/w3af-users



--
Andrés Riancho
Project Leader at w3af - http://w3af.org/ Web Application Attack and Audit 
Framework
Twitter: @w3af
GPG: 0x93C344F3



------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_mar
_______________________________________________
W3af-users mailing list
W3af-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-users

Reply via email to