normal traffic in nessusd.messages
top shows it going along just fine for a bit, but then update-nessusrc kicks
up to 100% cpu usage.
Strace -o file -Ff ./update-nessusrc -x _all_ myrc shows....
7613 write(1, "enaud Deraison <deraison@cvs.nes"..., 2979 <unfinished ...>
7611 read(5, <unfinished ...>
7613 <... write resumed> ) = 2979
7611 <... read resumed> "iscovered in the Courier Mail Se"..., 4096) = 4096
7613 exit_group(0) = ?
7611 read(5, "enaud Deraison <deraison@cvs.nes"..., 4096) = 2979
7611 --- SIGCHLD (Child exited) @ 0 (0) ---
7611 read(5, "", 4096) = 0
7611 close(5) = 0
7611 close(4) = 0
7611 waitpid(7613, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0) = 7613
7611 brk(0xac3e000) = 0xac3e000
7611 brk(0xac5f000) = 0xac5f000
7611 mmap2(NULL, 208896, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS,
-1, 0) = 0xb7c39000
7611 brk(0xac4e000) = 0xac4e000
7611 mremap(0xb7c39000, 208896, 208896, MREMAP_MAYMOVE) = 0xb7c39000
7611 mremap(0xb7c39000, 208896, 212992, MREMAP_MAYMOVE) = 0xb7c05000
7611 mremap(0xb7c05000, 212992, 212992, MREMAP_MAYMOVE) = 0xb7c05000
7611 mremap(0xb7c05000, 212992, 217088, MREMAP_MAYMOVE) = 0xb7c05000
7611 mremap(0xb7c05000, 217088, 217088, MREMAP_MAYMOVE) = 0xb7c05000
<repeated for a page>
7611 mremap(0xb7b9d000, 843776, 847872, MREMAP_MAYMOVE) = 0xb7b9d000
7611 mremap(0xb7b9d000, 847872, 847872, MREMAP_MAYMOVE) = 0xb7b9d000
7611 mremap(0xb7b9d000, 847872, 851968, MREMAP_MAYMOVE) = 0xb7acd000
7611 mremap(0xb7acd000, 851968, 851968, MREMAP_MAYMOVE) = 0xb7acd000
<repeated more>
7611 mremap(0xb792d000, 1732608, 1736704, MREMAP_MAYMOVE) = 0xb792d000
7611 mremap(0xb792d000, 1736704, 1736704, MREMAP_MAYMOVE) = 0xb792d000
7611 mremap(0xb792d000, 1736704, 1740800, MREMAP_MAYMOVE) = 0xb792d000
7611 mremap(0xb792d000, 1740800, 1740800, MREMAP_MAYMOVE) = 0xb792d000
7611 mremap(0xb792d000, 1740800, 1744896, MREMAP_MAYMOVE) = 0xb792d000
7611 mremap(0xb792d000, 1744896, 1744896, MREMAP_MAYMOVE) = 0xb792d000
7611 brk(0xac2d000) = 0xac2d000
7611 brk(0xac4e000) = 0xac4e000
7611 brk(0xac6f000) = 0xac6f000
7611 brk(0xac90000) = 0xac90000
7611 brk(0xacb1000) = 0xacb1000
7611 brk(0xacd2000) = 0xacd2000
7611 brk(0xacf3000) = 0xacf3000
7611 brk(0xad14000) = 0xad14000
7611 brk(0xad35000) = 0xad35000
7611 brk(0xad56000) = 0xad56000
7611 brk(0xad7d000) = 0xad7d000
7611 brk(0xad9e000) = 0xad9e000
7611 brk(0xadbf000) = 0xadbf000
7611 brk(0xade0000) = 0xade0000
7611 brk(0xae01000) = 0xae01000
7611 brk(0xae22000) = 0xae22000
7611 brk(0xae4e000) = 0xae4e000
7611 mmap2(NULL, 266240, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS,
-1, 0) = 0xb7c2b000
seems to me like it's reading it in just fine, and then goes south somewhere
about the time it starts trying to work with the list. perl is v5.8.8 on
RHEL4u5 and updated with all the latest patches (verified).
On 10/16/07, George A. Theall <theall@tenablesecurity.com> wrote:
On 10/15/07 22:32, Doug Nordwall wrote:
command line at the current time, from the directory it's in
./update-nessusrc -d -x _all_ myrc
and myrc exists and is a valid nessusrc.
Ok, that looks fine.
Do you see anything unusual in the nessusd.messages log file?
Have you tried using strace or an equivalent to see what the script is
doing when it appears to stall?
George
--
theall@tenablesecurity.com
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
--
Doug Nordwall
Unix, Network, and Security Administrator
You mean the vision is subject to low subscription rates?!!? - Scott Stone,
on MMORPGs
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
