Re: Disable service identification

I'll have a look in the morning regarding the messages you mentioned.

However, I pounded out xaudio in inetd.conf and the problem is now gone. 
Interestingly enough, this is the line in inetd.conf:

xaudio        stream   tcp              wait     root 
/usr/openwin/bin/Xaserver              Xaserver -noauth -inetd

The binary /usr/openwin/bin/Xaserver  does not exist on the box.  Not sure 
if that has something to do with it.

There are about 600 or so solaris 8 boxes, all with the same inetd.conf, all 
with this problem.  I'm hoping xaudio was the problem.  They are servers, so 
audio isn't needed.


----- Original Message ----- 
From: "Michel Arboi" <mikhail@nessus.org>
To: "Pete Duffin" <pduffin@blabbernet.net>
Cc: <nessus@list.nessus.org>
Sent: Thursday, July 12, 2007 4:40 PM
Subject: Re: Disable service identification


Le Thu, 12 Jul 2007 16:30:26 -0400,
"Pete Duffin" <pduffin@blabbernet.net> a écrit :

> Do you recall if xaudio has ever been a problem with Nessus?

No.

I am convinced that your problem is the classical rate limitation on
inetd. Have you seen something like "telnet/tcp server failing
(looping), service terminated" on your console or in /var/log/messages?

Solaris is not uncommon and I'd be very surprised if a denial of
service against such a critical component would have been unnoticed
until now. 

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus