Home
My Page
Projects
OpenVAS

[#1168] ping_host.nasl

Date:
2009-11-09 12:09
Priority:
3
State:
Open
Submitted by:
Michael Meyer (mime)
Assigned to:
Nobody (None)
Architecture:
None
Product:
OpenVAS
Operating System:
All
Component:
openvas-plugins
Version:
None
Severity:
normal
Resolution:
None
Hardware:
All
URL:
 
Summary:
ping_host.nasl

Detailed description
Michael Wiegand reported a problem with ping_host.nasl while scanning a Windows XP Host.



The Windows XP host is up and a ping succeed but ping_host.nasl mark this host as dead.



ping_host.nasl using two different ways to try to detect if a host is up.



1: send a ICMP (ICMP_ECHO_REQUEST) by using send_packet() with active pcap filter.



2: tcp_ping() from openvas-libraries/nasl/nasl_packet_forgery.c. tcp_ping() using pcap as well.



At the moment this problem was only seen if the openvas-scanner is running on a XEN-Node.



While scanning a few hundred hosts, a lot of plugins, which make use of send_packet(), are killed by openvas-scanner because timeout was reached. See the list at http://pastebin.com/m905b2ea. This openvas-scanner also runs on a XEN-Node.



So, there maybe exist a problem with openvas+pcap+xen.



ping_host.nasl has now been modified, to not longer mark hosts as dead by default. You must explicitly enable this feature.

Followup

No Followups Have Been Posted

Attached Files:

Changes:

No Changes Have Been Made to This Item


This site is hosted by Intevation GmbH