I have recently compiled and installed Nessus 2.2.0 on AIX 5.2. On
startup (using the default nessus.config) I receive notice that the
plugins have succesfully loaded, then the following is recorded in
nessusd.messages:
[Tue Dec 14 13:57:03 2004][22866] received the SEGV signal
and there are no nessus processes remaining. Though not experienced
with truss, I ran
truss nessusd -D > nessus.out
The last item in the .out file is "All plugins loaded" and the screen
output ends with the following (from where the status of all plugins
loaded is given). Unfortunately, it makes little sense to me:
kwrite(1, 0xF01AAD58, 55) = 55
socket(2, 1, 0) = 4
setsockopt(4, 65535, 4, 0x2FF229F0, 4) = 0
bind(4, 0x2FF229E0, 16) = 0
listen(4, 10) = 0
sigprocmask(2, 0xF0225738, 0x2FF22930) = 0
_sigaction(11, 0x2FF229C8, 0x2FF229D8) = 0
thread_setmymask_fast(0x00000000, 0x00000000, 0x00000000, 0x1000B721,
0x00000000, 0x6001D01D, 0x60005B41, 0x05FE0400) = 0x00000000
sigprocmask(2, 0xF0225738, 0x2FF22930) = 0
_sigaction(20, 0x2FF229C8, 0x2FF229D8) = 0
thread_setmymask_fast(0x00000000, 0x00000000, 0x00000000, 0x1000B721,
0x00000000, 0x6001D01D, 0x60005B41, 0x05FE0400) = 0x00000000
sigprocmask(2, 0xF0225738, 0x2FF22930) = 0
_sigaction(15, 0x2FF229C8, 0x2FF229D8) = 0
thread_setmymask_fast(0x00000000, 0x00000000, 0x00000000, 0x1000B721,
0x00000000, 0x6001D01D, 0x60005B41, 0x05FE0400) = 0x00000000
sigprocmask(2, 0xF0225738, 0x2FF22930) = 0
_sigaction(2, 0x2FF229C8, 0x2FF229D8) = 0
thread_setmymask_fast(0x00000000, 0x00000000, 0x00000000, 0x1000B721,
0x00000000, 0x6001D01D, 0x60005B41, 0x05FE0400) = 0x00000000
sigprocmask(2, 0xF0225738, 0x2FF22930) = 0
_sigaction(1, 0x2FF229C8, 0x2FF229D8) = 0
thread_setmymask_fast(0x00000000, 0x00000000, 0x00000000, 0x1000B721,
0x00000000, 0x6001D01D, 0x60005B41, 0x05FE0400) = 0x00000000
sigprocmask(2, 0xF0225738, 0x2FF22930) = 0
_sigaction(30, 0x2FF229C8, 0x2FF229D8) = 0
thread_setmymask_fast(0x00000000, 0x00000000, 0x00000000, 0x1000B721,
0x00000000, 0x6001D01D, 0x60005B41, 0x05FE0400) = 0x00000000
sigprocmask(2, 0xF0225738, 0x2FF22930) = 0
_sigaction(13, 0x2FF229C8, 0x2FF229D8) = 0
thread_setmymask_fast(0x00000000, 0x00000000, 0x00000000, 0x1000B721,
0x00000000, 0x6001D01D, 0x60005B41, 0x05FE0400) = 0x00000000
access(0xF09E2B94, 01) Err#2 ENOENT
access(0xF09E2B94, 01) Err#2 ENOENT
access(0xF09E2B94, 01) Err#2 ENOENT
access(0xF09E2B94, 01) Err#2 ENOENT
access(0xF09E2B94, 01) Err#2 ENOENT
access(0xF09E2B94, 01) Err#2 ENOENT
access(0xF09E2B94, 01) Err#2 ENOENT
access(0xF09E2B94, 01) Err#2 ENOENT
access(0xF09E2B94, 01) Err#2 ENOENT
access(0xF09E2B94, 01) Err#2 ENOENT
access(0xF09E2B94, 01) Err#2 ENOENT
access(0xF09E2B94, 01) Err#2 ENOENT
access(0xF09E2B94, 01) Err#2 ENOENT
access(0xF09E2B94, 01) Err#2 ENOENT
statx(0xD08CF164, 0x2FF229C0, 76, 0) = 0
open(0xD08CF164, O_RDONLY) = 5
mmap(0x00000000, 45936, PROT_READ, MAP_FILE|MAP_VARIABLE|MAP_SHARED, 5,
0) = 0x30000000
munmap(0x30000000, 45936) = 0
close(5) = 0
statx(0xD08CF198, 0x2FF229C0, 76, 0) = 0
statx(0xD08CF1BC, 0x2FF229C0, 76, 0) = 0
statx(0xD08CF1CC, 0x2FF229C0, 76, 0) Err#2 ENOENT
sigprocmask(0, 0xF0225738, 0xF0225730) = 0
kfork() = 17376
thread_setmymask_fast(0x00000000, 0x00000000, 0x00000000, 0xD0101180,
0x00000000, 0x1000B721, 0x1000B721, 0x05FE0400) = 0x00000000
__loadx(0x04000000, 0x2FF209D0, 0x00002000, 0xF01C9F70, 0x00000000) =
0x00000000
kfcntl(1, F_GETFL, 0x3000B721) = 2
kfcntl(2, F_GETFL, 0x3000B721) = 2
kfcntl(3, F_GETFL, 0x3000B721) = 9
_exit(0)
Any assistance would be very much appreciated. By the way, is there any
option for running nessusd in debug mode? I found nothing in the man or
-h flag to suggest such.
Thanks
Gregg Whitehouse
Confidentiality: This email message may contain confidential
information and is intended only for the individual named. If you
are not the named addressee you should not disseminate, distribute
or copy this email. Please notify the sender immediately by email
if you have received this email by mistake and delete this email
from your system. Email transmissions cannot be guaranteed to be
secure or error free as information could be intercepted, corrupted,
lost, destroyed, arrive late or incomplete, or contain viruses.
The sender therefore does not accept any liability for errors or
omissions in the contents of this message that arise as a result
of email transmissions. If verification is required please request a hard
copy version.
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
