Javier Fernández-Sanguino Peña wrote:
On Mon, Jan 10, 2005 at 05:01:36PM +0100, Petr Nekula wrote:
(... useless, since it straces the initd and does not follow (-f) the children process ... )Here is ending part of strace output:
If I could help you sending any other information, please let me know.
Yes, please provide a trace of the nessus daemon itself. Run (as root) 'strace -f nessusd -D'. Also please provide the information available in /var/log/nessus/nessusd.messages. There might be relevant error messages there....
Also, was this a freshly installed nessus installation or was it upgraded from a previous version?
Regards
Javier
Hello,
here is another part of strace output using 'strace -f nessusd -D'. I hope I have cutted it at the right place, otherway I can bzip2 and send full log, which have about 3MB unzipped:
...
stat64("/var/lib/nessus/plugins/solaris26_x86_105756.nasl", {st_mode=S_IFREG|0644, st_size=1220, ...}) = 0
stat64("/var/lib/nessus/plugins/.desc/solaris26_x86_105756.desc", {st_mode=S_IFREG|0644, st_size=7740, ...}) = 0
open("/var/lib/nessus/plugins/.desc/solaris26_x86_105756.desc", O_RDONLY) = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=7740, ...}) = 0
mmap2(NULL, 7740, PROT_READ, MAP_SHARED, 4, 0) = 0xb7fe5000
munmap(0xb7fe5000, 7740) = 0
close(4) = 0
stat64("/var/lib/nessus/plugins/basilix_message_content_script_injection.nasl", {st_mode=S_IFREG|0644, st_size=2415, ...}) = 0
stat64("/var/lib/nessus/plugins/.desc/basilix_message_content_script_injection.desc", {st_mode=S_IFREG|0644, st_size=7740, ...}) = 0
open("/var/lib/nessus/plugins/.desc/basilix_message_content_script_injection.desc", O_RDONLY) = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=7740, ...}) = 0
mmap2(NULL, 7740, PROT_READ, MAP_SHARED, 4, 0) = 0xb7fe5000
munmap(0xb7fe5000, 7740) = 0
close(4) = 0
time(NULL) = 1105374830
socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 4
setsockopt(4, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0
bind(4, {sa_family=AF_INET, sin_port=htons(1241), sin_addr=inet_addr("0.0.0.0")}, 16) = 0
listen(4, 10) = 0
rt_sigaction(SIGSEGV, {0x804f5e0, ~[ALRM RTMIN], 0}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGCHLD, {0x804f540, ~[ALRM RTMIN], 0}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGTERM, {0x804f5e0, ~[ALRM RTMIN], 0}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGINT, {0x804f5e0, ~[ALRM RTMIN], 0}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGHUP, {0x80572e0, ~[ALRM RTMIN], 0}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGUSR1, {0x804f5e0, ~[ALRM RTMIN], 0}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGPIPE, {SIG_IGN}, {SIG_DFL}, 8) = 0
access("/sbin/nmap", X_OK) = -1 ENOENT (No such file or directory)
access("/bin/nmap", X_OK) = -1 ENOENT (No such file or directory)
access("/usr/sbin/nmap", X_OK) = -1 ENOENT (No such file or directory)
access("/usr/bin/nmap", X_OK) = 0
stat64("/var/lib/nessus/services.tcp", {st_mode=S_IFREG|0644, st_size=163416, ...}) = 0
open("/var/lib/nessus/services.tcp", O_RDONLY) = 5
mmap2(NULL, 163416, PROT_READ, MAP_SHARED, 5, 0) = 0xb7c5b000
munmap(0xb7c5b000, 163416) = 0
close(5) = 0
stat64("/var/lib/nessus/services.udp", {st_mode=S_IFREG|0644, st_size=138204, ...}) = 0
stat64("/etc/services", {st_mode=S_IFREG|0644, st_size=16499, ...}) = 0
stat64("/usr/share/nmap/nmap-services", {st_mode=S_IFREG|0644, st_size=106784, ...}) = 0
stat64("/etc/nessus-services", 0xbfffe494) = -1 ENOENT (No such file or directory)
open("/dev/null", O_RDONLY) = 5
dup2(5, 0) = 0
dup2(5, 1) = 1
dup2(5, 2) = 2
close(5) = 0
clone(Process 3481 attached
child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb7c83968) = 3481
[pid 3480] write(1, "\rAll plugins loaded "..., 55 <unfinished ...>
[pid 3481] setsid( <unfinished ...>
[pid 3480] <... write resumed> ) = -1 EBADF (Bad file descriptor)
[pid 3481] <... setsid resumed> ) = 3481
[pid 3480] munmap(0xb7fe7000, 4096 <unfinished ...>
[pid 3481] open("/var/run/nessusd.pid", O_WRONLY|O_CREAT|O_TRUNC, 0666 <unfinished ...>
[pid 3480] <... munmap resumed> ) = 0
[pid 3481] <... open resumed> ) = 5
[pid 3480] exit_group(0) = ?
[pid 3481] getpid() = 3481
fstat64(5, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fe6000
write(5, "3481\n", 5) = 5
close(5) = 0
munmap(0xb7fe6000, 4096) = 0
rt_sigaction(SIGCHLD, {0x804f540, ~[ALRM RTMIN], 0}, {0x804f540, ~[KILL ALRM STOP RTMIN], 0}, 8) = 0
open("/dev/urandom", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFCHR|0444, st_rdev=makedev(1, 9), ...}) = 0
ioctl(5, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbffff2fc) = -1 EINVAL (Invalid argument)
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fe6000
read(5, "\222h\2!7\177,\237j\16-\2\374\335\242C4~-\240o\261v\366"..., 4096) = 4096
close(5) = 0
munmap(0xb7fe6000, 4096) = 0
time(NULL) = 1105374830
getpid() = 3481
getppid() = 1
getpid() = 3481
getpid() = 3481
open("/dev/urandom", O_RDONLY|O_NONBLOCK|O_NOCTTY) = 5
select(6, [5], NULL, NULL, {0, 10000}) = 1 (in [5], left {0, 10000})
read(5, "\\\361\276\272\211\302\355\35\204\353o\236\0\347z\303\325"..., 32) = 32
close(5) = 0
getpid() = 3481
getpid() = 3481
getuid32() = 0
getpid() = 3481
time(NULL) = 1105374830
getpid() = 3481
write(2, "*** \'ca_file\' is not set - did y"..., 55) = -1 EBADF (Bad file descriptor)
write(1, "\rAll plugins loaded "..., 55) = -1 EBADF (Bad file descriptor)
munmap(0xb7fe7000, 4096) = 0
exit_group(1) = ?
Process 3481 detached
Unfortunately nothing was written into /var/log/nessus/nessusd.messages during the start-up. Package was upgraded from previous version.
Regards
Petr Nekula [EMAIL PROTECTED]
-- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
