Scan stops
|
Logged in as: Guest
|
|
Users viewing this topic:
none
|
|
Login  | |
|
Scan stops - 27.Mar.2003 12:30:00 PM
|
|
|
Exploding Sheep
Posts: 25
Joined: 10.Feb.2003
From: SoCal
Status: offline
|
I scanned one of my domains the other day and it worked great. I am trying to scan the same domain again and the scan keeps stalling at Sending NETBIOS name query to xxx.xxx.xxx.xxx, it fails at different ip's and I am using the missing patches scan configuration. Any ideas?
TIA
|
|
|
|
RE: Scan stops - 27.Mar.2003 12:37:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
Can you post the debug window info since I'm not entirely sure what you are seeing (clean out any IP addresses or other info you don't want posted to the forums).
eric
|
|
|
|
|
RE: Scan stops - 28.Mar.2003 11:51:00 AM
|
|
|
Exploding Sheep
Posts: 25
Joined: 10.Feb.2003
From: SoCal
Status: offline
|
How do I post an image here? It is just a screen shot from paint. no URL.
|
|
|
|
|
RE: Scan stops - 28.Mar.2003 12:40:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
You can just cut and paste the debug window info, that is basically what I need. (Right hand window).
Or you can email the info to me at: eric@languard.com
eric
|
|
|
|
|
RE: Scan stops - 28.Mar.2003 7:11:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
Ok, got the image, back to my original question, what do you mean by stalling or stopping?
I see that you are getting Netbios Replys, but I also see that they are coming in in no particular order. What do you have your timeout set at, is this a LAN a WAN or ????
Also, if you use the normal scan configuration and not the missing patch one does it proceed correctly?
eric
|
|
|
|
|
RE: Scan stops - 31.Mar.2003 1:36:00 PM
|
|
|
Exploding Sheep
Posts: 25
Joined: 10.Feb.2003
From: SoCal
Status: offline
|
>Ok, got the image, back to my original question, what do you mean by stalling or stopping?
The image that I sent is where is stops. It will sit there forever, if I click the stop button is says that it is aborting but never atuclly does. I have to go in to task mng and kill the process.
>I see that you are getting Netbios Replys, but >I also see that they are coming in in no >particular order. What do you have your timeout >set at, is this a LAN a WAN or ????
This is over a LAN connection, timeouts are set to default.
>Also, if you use the normal scan configuration >and not the missing patch one does it proceed >correctly
I have tried several different configurations.
-Anthony
|
|
|
|
|
RE: Scan stops - 31.Mar.2003 8:19:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
quote:
The image that I sent is where is stops. It will sit there forever, if I click the stop button is says that it is aborting but never atuclly does. I have to go in to task mng and kill the process.
Ah, reason it jumps all around is because you are scanning from a file, not a 10.x.x.1 - 10.x.x. 254 type scan. Now I at least understand that.
Ok, so is the IP address that it shows at the end:
x.x.40.250 the last IP address in the filelist? If not how many are after it? How many machines in the file list total?
As for the abort button, it is waiting until it finishes out the current thread it is working on, not an immediate abort, but waiting, in this case for the NETBIOS probe to finish. I've mentioned this to the programmer recently. Don't know what plans there are there.
Anyway, need to know numbers to see if it is an issue there.
eric
|
|
|
|
|
RE: Scan stops - 1.Apr.2003 1:07:00 PM
|
|
|
Exploding Sheep
Posts: 25
Joined: 10.Feb.2003
From: SoCal
Status: offline
|
Eric,
I am scanning a domain so that is where the list came from, there are 1400 or so machines in the scan.
-Anthony
|
|
|
|
|
RE: Scan stops - 1.Apr.2003 5:44:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
ouch, ok, still need this answered though:
quote:
Ok, so is the IP address that it shows at the end:
x.x.40.250 the last IP address in the filelist? If not how many are after it?
Is this machine in the middle of the list, right at the end, towards the beginning, have you removed this IP and put it back in to see if there is a problem with invalid characters? Have you checked to see if the machine listed right after this one is valid or perhaps a blank line?
eric
|
|
|
|
|
RE: Scan stops - 1.Apr.2003 8:08:00 PM
|
|
|
Exploding Sheep
Posts: 25
Joined: 10.Feb.2003
From: SoCal
Status: offline
|
quote:
Ok, so is the IP address that it shows at the end:
x.x.40.250 the last IP address in the filelist? If not how many are after it?
No it is not, as you can see from the image it is only in the Cee's so it has quite a bit more left in the scan. It will stop at different machines every time I have run the scan.
|
|
|
|
|
RE: Scan stops - 1.Apr.2003 9:13:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
Ok, lots more info is required tho...
What OS are you on?
What SP?
How was the file list made?
What is in it? (IP address, DNS names, what)
What other programs are running?
When it stalls try going to a cmd prompt, do a netstat -a How many current connections are you waiting on that are still listening? Are ports being closed or have we run out of stack space?
Is a LNSS_debug.log file generated? If so mail it to bugs@languard.com
You said in the initial post that it worked before, what version were you running then? It appears from the graphic you sent me that you are running 3.2, what version of 3.2 (Help > Version Information)
Did you use this same filelist before, or is this a new one?
Is this the same machine you used before? If not can you get it to happen on another machine or only this one?
What has been installed on this machine since then (whenever it worked before)?
If you break up the filelist file into smaller sections does it still stall out? How far into the file is it stalling out? I see it is CNELSON on this one, is it normally the same basic area/number of machines? (how far into the file is this machine?)
etc, etc, etc.
So far all I know is that it stalls, you are running some version of 3.2, and you are using a file_list.txt file to do the scan with approx 1400 machines in it.
Thanks
eric
|
|
|
|
RE: Scan stops - 2.Apr.2003 4:04:00 AM
|
|
|
peters
Posts: 9
Joined: 5.Mar.2003
Status: offline
|
This seems to be a pretty general problem.
For what it is worth, we have observed that our system is less prone to hang if we set the UDP delay (under options to 10% (60) of the default value)
The most common hang, we have is, with the last displayed message, waiting for the UDP thread, (I have not had time to test the theory, but it almost seems that Languard will hang if the TCP thread completes before the UDP)
|
|
|
|
|
RE: Scan stops - 2.Apr.2003 10:57:00 AM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
Peter,
Interesting, haven't noticed that in any of my testing over the past few years, but will have to watch for it.
This hang is in the netbios part of the scan though, the UDP scan is a long way off since this is still in the initial probe and it has SNMP and ICMP full scans of the list to do before it gets to the initial connections to one specific machine where it will start the TCP and UDP scan.
What OS are you seeing this on Peter, what version of LNSS, and does LNSS completely lock up then, or does it continue on through.
eric
|
|
|
|
|
RE: Scan stops - 2.Apr.2003 12:12:00 PM
|
|
|
Exploding Sheep
Posts: 25
Joined: 10.Feb.2003
From: SoCal
Status: offline
|
quote:
What OS are you on?
What SP?
How was the file list made?
What is in it? (IP address, DNS names, what)
What other programs are running?
OS = 2000 ADV. Server
SP = 3
File list was created from "pick computers" and then selecting the domain I want to scan.
I am assuming it was from DNS names.
no other programs are running.
This is on a new Dell server with dual 2GHz processors, 1GB of memory, (3) 36GB running RAID 5.
Now for the last two scans i have initated it close down the program for some reason. Here is the Dr. Watson from event viewer
The application, , generated an application error The error occurred on 04/02/2003 @ 08:07:15.890 The exception generated was c0000005 at address 00401D0E (<nosymbols>)
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|
Printable Version
