RE: Script Engine scanning getting stuck in loop

["Alex Jurkiewicz" <alex_j () iinet net au>]

I have identified the script causing the problem. I ran this command:
Nmap -vv --script=<script> -p1-65535 HOSTNAME.COM
Using any value for <script> that included showOwner.nse (including `safe`)
caused the hang.

I can connect to the identd service on the machine fine:
$ telnet HOSTNAME.COM 113
80,80

80 , 80 : ERROR :NO-USER
Connection closed by foreign host.
$

If you'd like further troubleshooting let me know.

AJ


From: Alex Jurkiewicz [mailto:] 
Sent: Sunday, 24 February 2008 11:58 PM
To: 'nmap-dev () insecure org'
Subject: Script Engine scanning getting stuck in loop

Hi All,

I've run into an issue with the script engine while scanning a host, it gets
stuck in an infinite loop.
Running nmap-4.53 on Centos5. I've compiled it from source with default
options.

# nmap -A -v -p1-65535 -vvv HOSTNAME.COM | tee nmap.log

At a certain point during the scanning it just begins to loop:
[.]
NSOCK (485.4790s) nsock_loop() started (timeout=50ms). 0 events pending
NSOCK (485.4790s) nsock_loop() started (timeout=50ms). 0 events pending
NSOCK (485.4790s) nsock_loop() started (timeout=50ms). 0 events pending
Stats: 0:08:05 elapsed; 0 hosts completed (1 up), 1 undergoing Script Scan
Active NSE scripts: 102
SCRIPT ENGINE Timing: About 17.74% done; ETC: 23:15 (0:03:14 remaining)
NSOCK (485.4800s) nsock_loop() started (timeout=50ms). 0 events pending
NSOCK (485.4800s) nsock_loop() started (timeout=50ms). 0 events pending
NSOCK (485.4800s) nsock_loop() started (timeout=50ms). 0 events pending
[.]
SCRIPT ENGINE Timing: About 17.74% done; ETC: 23:18 (0:05:56 remaining)
^C

While this is happening nmap seems to be continually pouring out the above
`0 events pending` line. After the 5 minute test above I had a 100 000 line
logfile. I trimmed it and attached it to this mail:
$ cat nmap.log | grep --context=10 -v "nsock_loop() started (timeout=50ms).
0 events pending" >> nmap2.log

Let me know if I can provide more info.

Cheers,
Alex

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org