Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Nessus-Users
[Top] [All Lists]

Re: Re: Nessus 2.0.12 on AIX (George Theall)

Subject: Re: Re: Nessus 2.0.12 on AIX (George Theall)
Date: Mon, 25 Oct 2004 19:47:15 -0400
On Mon, Oct 25, 2004 at 04:44:50PM -0400, Neil Lewinski wrote:
There is one line appended to nessusd.messages 2 minutes after startup:

  [Mon Oct 25 16:29:25 2004][27882] received the SEGV signal

Any idea what process was associated with pid 27882? Does it relate to
nessusd, perhaps servicing an incoming connection? Or was it unrelatted?

o Does it stay active or exit?

It stays active:

# ps -ef |grep nessusd |grep -v grep
    root 25350     1   0 16:27:06  pts/3  0:00 nessusd -D

Are you sure it's not listening? Can you use, for example, something
like lsof to verify this?

o Can you run truss / syscalls to trace the execution of nessusd and
pinpoint the problem?

I'm not really a truss guy (sadly), although I did try it, and it does
offer a huge amount of feedback. If anyone can direct me to a way to 
just
look at ports being opened (or filter out all the plugins being opened)
I'd be glad to truss it again.

Try removing files from the plugins directory and restarting nessusd.

George
-- 
theall@tifaware.com

Attachment: pgpcx6nHNH6tQ.pgp
Description: PGP signature

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
<Prev in Thread] Current Thread [Next in Thread>