<strong>Report forwarded</strong> to <code>debian-bugs-dist@lists.debian.org, Josip Rodin &lt;jrodin@jagor.srce.hr&gt;</code>:<br>
<code>Bug#88729</code>; Package <code>nessusd</code>.


debian-bugs-dist@lists.debian.orgJosip Rodin <jrodin@jagor.srce.hr>

Subject: Bug#88729: Severed client/server connection when logs are rotated
Reply-To: Javier Fernandez-Sanguino =?iso-8859-1?Q?Pe=F1a?= <jfernandez@sgi.es>, 88729@bugs.debian.org
Resent-From: Javier Fernandez-Sanguino =?iso-8859-1?Q?Pe=F1a?= <jfernandez@sgi.es>
Orignal-Sender: jfsp@sgi.es
Resent-To: debian-bugs-dist@lists.debian.org
Resent-CC: Josip Rodin <jrodin@jagor.srce.hr>
Resent-Date: Tue, 06 Mar 2001 11:09:10 GMT
Resent-Message-ID: <handler.88729.B.98387690120633@bugs.debian.org>
Resent-Sender: owner@bugs.debian.org
X-Debian-PR-Message: report 88729
X-Debian-PR-Package: nessusd
X-Debian-PR-Keywords: 
X-Loop: owner@bugs.debian.org
Received: via spool by bugs@bugs.debian.org id=B.98387690120633
          (code B ref -1); Tue, 06 Mar 2001 11:09:10 GMT
Sender: jfsp@sgi.es
Message-ID: <3AA4C671.27C0585B@sgi.es>
Date: Tue, 06 Mar 2001 12:13:53 +0100
From: Javier Fernandez-Sanguino =?iso-8859-1?Q?Pe=F1a?= <jfernandez@sgi.es>
Organization: SGI GMV
X-Mailer: Mozilla 4.75 [es] (X11; U; Linux 2.2.17 i686)
X-Accept-Language: es, en
MIME-Version: 1.0
To: bugs@debian.org
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Delivered-To: submit@bugs.debian.org
Delivered-To: bugs@debian.org

Package: nessusd
Version: 1.0.6-1
Severity: normal

        Please be warned, this is unstable's nessusd, compiled in a
potato system. However, the problem described could appear in other
setups (IMHO in any testing/unstable system).
        I do frequent scans on multiple hosts (around 10) and I've recently
had a lot of problems with scanners being "frozen" after a day of being
run. I figured this might be a problem with the nessus server but, alas,
I think I have found the problem (but not tested it thoroughly, BTW).
        Taking a look at my /var/log/nessus/messages files, the scanners
seem to run perfectly *until* the log file is rotated. I checked the
/etc/logrotate.d/nessusd file and it kills the server in order to move
the logs.
        If a scan is being run at that time then the client cannot communicate
with the server (even if it's still running since a SIGHUP was sent), the
scanning processes are held and no longer answer and, in order to continue
the scans, the server must be restarted and the client must re-login with it.

        This is my guess of the problem's I've had currently, since it seems
it is not a problem of the nessus server itself (I have not seen anyone with
a similar in the nessus mailing list), but it is of the Debian package.

        As evidence of the problem :)
        I left a scanner running a whole weekend, starting friday, and all
went well until friday night, the last output in the message file (friday's)
is:
[Sat Mar  3 00:38:10 2001][7557] Caught HUP signal - reconfiguring nessusd

The following days the message files just have:;
[Sat Mar  3 00:38:10 2001][7557] started by uid 0
[Sat Mar  3 00:38:18 2001][7557] closing logfile
[Sat Mar  3 00:38:18 2001][7557] started by uid 0
[Sun Mar  4 00:38:15 2001][7557] Caught HUP signal - reconfiguring nessusd
[Sun Mar  4 00:38:15 2001][7557] closing logfile

        When I arrived Monday, the nessus client looked like it could keep on
with the tests, but was frozen (not frozen in the sense that it does not
acknowledge window movements and keystrokes, but the tests do not proceed on).


        Could you please confirm this issue and send a note to the mailing
list? 

	My quick fix is to just rotate files monthly, and put a note on the
README.Debian file regarding this, Could you please send this fix to testing
too?
Otherwise users of Debian 2.3 might get the impression that the problem is with
the nessus server and this will become a FAQ of the nessus-users mailing list :)

        Thanxs

        Javi

-- System Information
Debian Release: 2.2
Kernel Version: Linux pcjfsp 2.2.17 #1 SMP Thu Sep 7 09:30:51 CEST 2000 i686
unknown

Versions of the packages nessusd depends on:
ii  libc6          2.1.97-1       GNU C Library: Shared libraries and Timezone
ii  libgmp2        2.0.2-6        Multiprecision arithmetic library
ii  libnasl1       1.0.6-1        Nessus Attack Scripting Language, shared lib
ii  libnessus1     1.0.6-1        Nessus shared libraries
ii  libpcap0       0.4a6-3        System interface for user-level packet captu
ii  libwrap0       7.6-4          Wietse Venema's TCP wrappers library
ii  nessus-plugins 1.0.6-1        Nessus plugins
ii  zlib1g         1.1.3-5        compression library - runtime
        ^^^ (Provides virtual package libz1)




<strong>Acknowledgement sent</strong> to <code>Javier Fernandez-Sanguino =?iso-8859-1?Q?Pe=F1a?= &lt;jfernandez@sgi.es&gt;</code>:<br>
New Bug report received and forwarded.  Copy sent to <code>Josip Rodin &lt;jrodin@jagor.srce.hr&gt;</code>.


-t

From: owner@bugs.debian.org (Debian Bug Tracking System)
To: Javier Fernandez-Sanguino =?iso-8859-1?Q?Pe=F1a?= <jfernandez@sgi.es>
Subject: Bug#88729: Acknowledgement (Severed client/server connection when logs are rotated)
Message-ID: <handler.88729.B.98387690120633.ack@bugs.debian.org>
In-Reply-To: <3AA4C671.27C0585B@sgi.es>
References: <3AA4C671.27C0585B@sgi.es>
X-Debian-PR-Message: ack 88729

Thank you for the problem report you have sent regarding Debian.
This is an automatically generated reply, to let you know your message has
been received.  It is being forwarded to the developers mailing list for
their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 Josip Rodin <jrodin@jagor.srce.hr>

If you wish to submit further information on your problem, please send
it to 88729@bugs.debian.org (and *not* to
bugs@bugs.debian.org).

Please do not reply to the address at the top of this message,
unless you wish to report a problem with the Bug-tracking system.

Darren Benham
(administrator, Debian Bugs database)



Received: (at submit) by bugs.debian.org; 6 Mar 2001 11:08:21 +0000
From jfernandez@sgi.es Tue Mar 06 05:08:21 2001
Return-path: <jfernandez@sgi.es>
Received: from caronte.gmv.es (caronte) [::ffff:195.235.177.2] 
	by master.debian.org with esmtp (Exim 3.12 1 (Debian))
	id 14aFKG-0005MT-00; Tue, 06 Mar 2001 05:08:20 -0600
Received: by caronte; id MAA05987; Tue, 6 Mar 2001 12:06:50 +0100 (MET)
Received: from pegaso.sgi.es(192.168.18.16) by caronte.gmv.es via smap (V5.5)
	id xma005962; Tue, 6 Mar 01 12:06:22 +0100
Received: from sgi.es (pcjfsp.sgi.es [192.168.18.207])
	by sgi.es (8.9.1b+Sun/8.9.1) with ESMTP id MAA14358
	for <bugs@debian.org>; Tue, 6 Mar 2001 12:08:58 +0100 (MET)
Sender: jfsp@sgi.es
Message-ID: <3AA4C671.27C0585B@sgi.es>
Date: Tue, 06 Mar 2001 12:13:53 +0100
From: Javier Fernandez-Sanguino =?iso-8859-1?Q?Pe=F1a?= <jfernandez@sgi.es>
Organization: SGI GMV
X-Mailer: Mozilla 4.75 [es] (X11; U; Linux 2.2.17 i686)
X-Accept-Language: es, en
MIME-Version: 1.0
To: bugs@debian.org
Subject: Severed client/server connection when logs are rotated
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Delivered-To: submit@bugs.debian.org
Delivered-To: bugs@debian.org

Package: nessusd
Version: 1.0.6-1
Severity: normal

        Please be warned, this is unstable's nessusd, compiled in a
potato system. However, the problem described could appear in other
setups (IMHO in any testing/unstable system).
        I do frequent scans on multiple hosts (around 10) and I've recently
had a lot of problems with scanners being "frozen" after a day of being
run. I figured this might be a problem with the nessus server but, alas,
I think I have found the problem (but not tested it thoroughly, BTW).
        Taking a look at my /var/log/nessus/messages files, the scanners
seem to run perfectly *until* the log file is rotated. I checked the
/etc/logrotate.d/nessusd file and it kills the server in order to move
the logs.
        If a scan is being run at that time then the client cannot communicate
with the server (even if it's still running since a SIGHUP was sent), the
scanning processes are held and no longer answer and, in order to continue
the scans, the server must be restarted and the client must re-login with it.

        This is my guess of the problem's I've had currently, since it seems
it is not a problem of the nessus server itself (I have not seen anyone with
a similar in the nessus mailing list), but it is of the Debian package.

        As evidence of the problem :)
        I left a scanner running a whole weekend, starting friday, and all
went well until friday night, the last output in the message file (friday's)
is:
[Sat Mar  3 00:38:10 2001][7557] Caught HUP signal - reconfiguring nessusd

The following days the message files just have:;
[Sat Mar  3 00:38:10 2001][7557] started by uid 0
[Sat Mar  3 00:38:18 2001][7557] closing logfile
[Sat Mar  3 00:38:18 2001][7557] started by uid 0
[Sun Mar  4 00:38:15 2001][7557] Caught HUP signal - reconfiguring nessusd
[Sun Mar  4 00:38:15 2001][7557] closing logfile

        When I arrived Monday, the nessus client looked like it could keep on
with the tests, but was frozen (not frozen in the sense that it does not
acknowledge window movements and keystrokes, but the tests do not proceed on).


        Could you please confirm this issue and send a note to the mailing
list? 

	My quick fix is to just rotate files monthly, and put a note on the
README.Debian file regarding this, Could you please send this fix to testing
too?
Otherwise users of Debian 2.3 might get the impression that the problem is with
the nessus server and this will become a FAQ of the nessus-users mailing list :)

        Thanxs

        Javi

-- System Information
Debian Release: 2.2
Kernel Version: Linux pcjfsp 2.2.17 #1 SMP Thu Sep 7 09:30:51 CEST 2000 i686
unknown

Versions of the packages nessusd depends on:
ii  libc6          2.1.97-1       GNU C Library: Shared libraries and Timezone
ii  libgmp2        2.0.2-6        Multiprecision arithmetic library
ii  libnasl1       1.0.6-1        Nessus Attack Scripting Language, shared lib
ii  libnessus1     1.0.6-1        Nessus shared libraries
ii  libpcap0       0.4a6-3        System interface for user-level packet captu
ii  libwrap0       7.6-4          Wietse Venema's TCP wrappers library
ii  nessus-plugins 1.0.6-1        Nessus plugins
ii  zlib1g         1.1.3-5        compression library - runtime
        ^^^ (Provides virtual package libz1)




<strong>Information forwarded</strong> to <code>debian-bugs-dist@lists.debian.org, Josip Rodin &lt;jrodin@jagor.srce.hr&gt;</code>:<br>
<code>Bug#88729</code>; Package <code>nessusd</code>.


debian-bugs-dist@lists.debian.orgJosip Rodin <jrodin@jagor.srce.hr>

Subject: Bug#88729: Severed client/server connection when logs are rotated
Reply-To: Josip Rodin <jrodin@public.srce.hr>, 88729@bugs.debian.org
Resent-From: Josip Rodin <jrodin@public.srce.hr>
Resent-To: debian-bugs-dist@lists.debian.org
Resent-CC: Josip Rodin <jrodin@jagor.srce.hr>
Resent-Date: Tue, 06 Mar 2001 20:48:54 GMT
Resent-Message-ID: <handler.88729.B88729.98391167110737@bugs.debian.org>
Resent-Sender: owner@bugs.debian.org
X-Debian-PR-Message: report 88729
X-Debian-PR-Package: nessusd
X-Debian-PR-Keywords: 
X-Loop: owner@bugs.debian.org
Received: via spool by 88729-bugs@bugs.debian.org id=B88729.98391167110737
          (code B ref 88729); Tue, 06 Mar 2001 20:48:54 GMT
Date: Tue, 6 Mar 2001 21:47:46 +0100
From: Josip Rodin <jrodin@public.srce.hr>
To: =?iso-8859-1?Q?Javier_Fernandez-Sanguino_Pe=F1a?= <jfernandez@sgi.es>,
        88729@bugs.debian.org
Message-ID: <20010306214746.B7214@jagor.srce.hr>
References: <3AA4C671.27C0585B@sgi.es>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
X-Mailer: Mutt 0.95i
In-Reply-To: =?iso-8859-1?Q?=3C3AA4C671=2E27C0585B=40sgi=2Ees=3E=3B_from_Javier_Ferna?=
 =?iso-8859-1?Q?ndez-Sanguino_Pe=F1a_on_Tue=2C_Mar_06=2C_2001_at_12:13:53?=
 =?iso-8859-1?Q?PM_+0100?=
Content-Transfer-Encoding: quoted-printable
X-MIME-Autoconverted: from 8bit to quoted-printable by jagor.srce.hr id VAA26551
Delivered-To: 88729@bugs.debian.org

On Tue, Mar 06, 2001 at 12:13:53PM +0100, Javier Fernandez-Sanguino Pe=F1=
a wrote:
> Package: nessusd
> Version: 1.0.6-1
> Severity: normal
>=20
>         Taking a look at my /var/log/nessus/messages files, the scanner=
s
> seem to run perfectly *until* the log file is rotated. I checked the
> /etc/logrotate.d/nessusd file and it kills the server in order to move
> the logs.
>         If a scan is being run at that time then the client cannot
> communicate with the server (even if it's still running since a SIGHUP =
was
> sent), the scanning processes are held and no longer answer and, in ord=
er
> to continue the scans, the server must be restarted and the client must
> re-login with it.

So, the HUP signal has additional negative effects... darn.

BTW this was implemented as a result of bug #75954.

> 	My quick fix is to just rotate files monthly, and put a note on the
> README.Debian file regarding this, Could you please send this fix to
> testing too? Otherwise users of Debian 2.3 might get the impression tha=
t
> the problem is with the nessus server and this will become a FAQ of the
> nessus-users mailing list :)

Debian 2.3 still isn't that close to release, you know :)

I have to verify this (with 1.0.7a, but there shouldn't be a difference
because the HUP signal handler function hasn't changed since 1.0.6).
Maybe logrotate's copytruncate option will work, too.

--=20
Digital Electronic Being Intended for Assassination and Nullification




<strong>Acknowledgement sent</strong> to <code>Josip Rodin &lt;jrodin@public.srce.hr&gt;</code>:<br>
Extra info received and forwarded to list.  Copy sent to <code>Josip Rodin &lt;jrodin@jagor.srce.hr&gt;</code>.


-t

From: owner@bugs.debian.org (Debian Bug Tracking System)
To: Josip Rodin <jrodin@public.srce.hr>
Subject: Bug#88729: Info received (was Bug#88729: Severed client/server connection when logs are rotated)
Message-ID: <handler.88729.B88729.98391167110737.ackinfo@bugs.debian.org>
In-Reply-To: <20010306214746.B7214@jagor.srce.hr>
References: <20010306214746.B7214@jagor.srce.hr>
X-Debian-PR-Message: ack-info-maintonly 88729

Thank you for the additional information you have supplied regarding
this problem report.  It has been forwarded to the developer(s) and
to the developers mailing list to accompany the original report.

Your message has been sent to the package maintainer(s):
 Josip Rodin <jrodin@jagor.srce.hr>

If you wish to continue to submit further information on your problem,
please send it to 88729@bugs.debian.org, as before.

Please do not reply to the address at the top of this message,
unless you wish to report a problem with the Bug-tracking system.

Darren Benham
(administrator, Debian Bugs database)



Received: (at 88729) by bugs.debian.org; 6 Mar 2001 20:47:51 +0000
From jrodin@jagor.srce.hr Tue Mar 06 14:47:51 2001
Return-path: <jrodin@jagor.srce.hr>
Received: from jagor.srce.hr [::ffff:161.53.2.130] 
	by master.debian.org with esmtp (Exim 3.12 1 (Debian))
	id 14aON4-0002n3-00; Tue, 06 Mar 2001 14:47:51 -0600
Received: (from jrodin@localhost)
	by jagor.srce.hr (8.9.0/8.9.0) id VAA26551;
	Tue, 6 Mar 2001 21:47:46 +0100 (MET)
Date: Tue, 6 Mar 2001 21:47:46 +0100
From: Josip Rodin <jrodin@public.srce.hr>
To: =?iso-8859-1?Q?Javier_Fernandez-Sanguino_Pe=F1a?= <jfernandez@sgi.es>,
        88729@bugs.debian.org
Subject: Re: Bug#88729: Severed client/server connection when logs are rotated
Message-ID: <20010306214746.B7214@jagor.srce.hr>
References: <3AA4C671.27C0585B@sgi.es>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
X-Mailer: Mutt 0.95i
In-Reply-To: =?iso-8859-1?Q?=3C3AA4C671=2E27C0585B=40sgi=2Ees=3E=3B_from_Javier_Ferna?=
 =?iso-8859-1?Q?ndez-Sanguino_Pe=F1a_on_Tue=2C_Mar_06=2C_2001_at_12:13:53?=
 =?iso-8859-1?Q?PM_+0100?=
Content-Transfer-Encoding: quoted-printable
X-MIME-Autoconverted: from 8bit to quoted-printable by jagor.srce.hr id VAA26551
Delivered-To: 88729@bugs.debian.org

On Tue, Mar 06, 2001 at 12:13:53PM +0100, Javier Fernandez-Sanguino Pe=F1=
a wrote:
> Package: nessusd
> Version: 1.0.6-1
> Severity: normal
>=20
>         Taking a look at my /var/log/nessus/messages files, the scanner=
s
> seem to run perfectly *until* the log file is rotated. I checked the
> /etc/logrotate.d/nessusd file and it kills the server in order to move
> the logs.
>         If a scan is being run at that time then the client cannot
> communicate with the server (even if it's still running since a SIGHUP =
was
> sent), the scanning processes are held and no longer answer and, in ord=
er
> to continue the scans, the server must be restarted and the client must
> re-login with it.

So, the HUP signal has additional negative effects... darn.

BTW this was implemented as a result of bug #75954.

> 	My quick fix is to just rotate files monthly, and put a note on the
> README.Debian file regarding this, Could you please send this fix to
> testing too? Otherwise users of Debian 2.3 might get the impression tha=
t
> the problem is with the nessus server and this will become a FAQ of the
> nessus-users mailing list :)

Debian 2.3 still isn't that close to release, you know :)

I have to verify this (with 1.0.7a, but there shouldn't be a difference
because the HUP signal handler function hasn't changed since 1.0.6).
Maybe logrotate's copytruncate option will work, too.

--=20
Digital Electronic Being Intended for Assassination and Nullification




<strong>Information forwarded</strong> to <code>debian-bugs-dist@lists.debian.org, Josip Rodin &lt;jrodin@jagor.srce.hr&gt;</code>:<br>
<code>Bug#88729</code>; Package <code>nessusd</code>.


debian-bugs-dist@lists.debian.orgJosip Rodin <jrodin@jagor.srce.hr>

Subject: Bug#88729: Patch for this bug
Reply-To: Javier Fernandez-Sanguino =?iso-8859-1?Q?Pe=F1a?= <jfernandez@sgi.es>, 88729@bugs.debian.org
Resent-From: Javier Fernandez-Sanguino =?iso-8859-1?Q?Pe=F1a?= <jfernandez@sgi.es>
Orignal-Sender: jfsp@sgi.es
Resent-To: debian-bugs-dist@lists.debian.org
Resent-CC: Josip Rodin <jrodin@jagor.srce.hr>
Resent-Date: Mon, 02 Apr 2001 15:03:47 GMT
Resent-Message-ID: <handler.88729.B88729.9862233433951@bugs.debian.org>
Resent-Sender: owner@bugs.debian.org
X-Debian-PR-Message: report 88729
X-Debian-PR-Package: nessusd
X-Debian-PR-Keywords: 
X-Loop: owner@bugs.debian.org
Received: via spool by 88729-bugs@bugs.debian.org id=B88729.9862233433951
          (code B ref 88729); Mon, 02 Apr 2001 15:03:47 GMT
Sender: jfsp@sgi.es
Message-ID: <3AC89475.C0120595@sgi.es>
Date: Mon, 02 Apr 2001 17:02:13 +0200
From: Javier Fernandez-Sanguino =?iso-8859-1?Q?Pe=F1a?= <jfernandez@sgi.es>
Organization: SGI GMV
X-Mailer: Mozilla 4.75 [es] (X11; U; Linux 2.2.17 i686)
X-Accept-Language: es, en
MIME-Version: 1.0
To: 88729@bugs.debian.org
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Delivered-To: 88729@bugs.debian.org


Devin Kowatch commented in the nessus mailing list that there is a patch
availiable for the SIGHUP issue.... FYI

>Just about anything that sends a SIGHUP to nessusd will cause any
>active scans to hang.  This means that nessus-update-plugins will cause a scan to
>hang as well. However, this is less of a problem as you can run
>nessus-update-plugins out of cron due to it's use of lynx.  Check >www.nessus.com/patches for a fix.



Javi




<strong>Acknowledgement sent</strong> to <code>Javier Fernandez-Sanguino =?iso-8859-1?Q?Pe=F1a?= &lt;jfernandez@sgi.es&gt;</code>:<br>
Extra info received and forwarded to list.  Copy sent to <code>Josip Rodin &lt;jrodin@jagor.srce.hr&gt;</code>.


-t

From: owner@bugs.debian.org (Debian Bug Tracking System)
To: Javier Fernandez-Sanguino =?iso-8859-1?Q?Pe=F1a?= <jfernandez@sgi.es>
Subject: Bug#88729: Info received (was Patch for this bug)
Message-ID: <handler.88729.B88729.9862233433951.ackinfo@bugs.debian.org>
In-Reply-To: <3AC89475.C0120595@sgi.es>
References: <3AC89475.C0120595@sgi.es>
X-Debian-PR-Message: ack-info-maintonly 88729

Thank you for the additional information you have supplied regarding
this problem report.  It has been forwarded to the developer(s) and
to the developers mailing list to accompany the original report.

Your message has been sent to the package maintainer(s):
 Josip Rodin <jrodin@jagor.srce.hr>

If you wish to continue to submit further information on your problem,
please send it to 88729@bugs.debian.org, as before.

Please do not reply to the address at the top of this message,
unless you wish to report a problem with the Bug-tracking system.

Darren Benham
(administrator, Debian Bugs database)



Received: (at 88729) by bugs.debian.org; 2 Apr 2001 14:55:43 +0000
From jfernandez@sgi.es Mon Apr 02 09:55:43 2001
Return-path: <jfernandez@sgi.es>
Received: from caronte.gmv.es (caronte) [195.235.177.2] (firewall-user)
	by master.debian.org with esmtp (Exim 3.12 1 (Debian))
	id 14k5k6-00011a-00; Mon, 02 Apr 2001 09:55:42 -0500
Received: by caronte; id QAA27781; Mon, 2 Apr 2001 16:54:01 +0200 (MET DST)
Received: from pegaso.sgi.es(192.168.18.16) by caronte.gmv.es via smap (V5.5)
	id xma027168; Mon, 2 Apr 01 16:53:09 +0200
Received: from sgi.es (pcjfsp.sgi.es [192.168.18.207])
	by sgi.es (8.9.1b+Sun/8.9.1) with ESMTP id QAA21124
	for <88729@bugs.debian.org>; Mon, 2 Apr 2001 16:56:09 +0200 (MET DST)
Sender: jfsp@sgi.es
Message-ID: <3AC89475.C0120595@sgi.es>
Date: Mon, 02 Apr 2001 17:02:13 +0200
From: Javier Fernandez-Sanguino =?iso-8859-1?Q?Pe=F1a?= <jfernandez@sgi.es>
Organization: SGI GMV
X-Mailer: Mozilla 4.75 [es] (X11; U; Linux 2.2.17 i686)
X-Accept-Language: es, en
MIME-Version: 1.0
To: 88729@bugs.debian.org
Subject: Patch for this bug
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Delivered-To: 88729@bugs.debian.org


Devin Kowatch commented in the nessus mailing list that there is a patch
availiable for the SIGHUP issue.... FYI

>Just about anything that sends a SIGHUP to nessusd will cause any
>active scans to hang.  This means that nessus-update-plugins will cause a scan to
>hang as well. However, this is less of a problem as you can run
>nessus-update-plugins out of cron due to it's use of lynx.  Check >www.nessus.com/patches for a fix.



Javi




<strong>Information forwarded</strong> to <code>debian-bugs-dist@lists.debian.org, Josip Rodin &lt;jrodin@jagor.srce.hr&gt;</code>:<br>
<code>Bug#88729</code>; Package <code>nessusd</code>.


debian-bugs-dist@lists.debian.orgJosip Rodin <jrodin@jagor.srce.hr>

Subject: Bug#88729: Patch for this bug
Reply-To: Josip Rodin <jrodin@public.srce.hr>, 88729@bugs.debian.org
Resent-From: Josip Rodin <jrodin@public.srce.hr>
Resent-To: debian-bugs-dist@lists.debian.org
Resent-CC: Josip Rodin <jrodin@jagor.srce.hr>
Resent-Date: Mon, 02 Apr 2001 18:48:01 GMT
Resent-Message-ID: <handler.88729.B88729.9862367719823@bugs.debian.org>
Resent-Sender: owner@bugs.debian.org
X-Debian-PR-Message: report 88729
X-Debian-PR-Package: nessusd
X-Debian-PR-Keywords: 
X-Loop: owner@bugs.debian.org
Received: via spool by 88729-bugs@bugs.debian.org id=B88729.9862367719823
          (code B ref 88729); Mon, 02 Apr 2001 18:48:01 GMT
Date: Mon, 2 Apr 2001 20:39:00 +0200
From: Josip Rodin <jrodin@public.srce.hr>
To: =?iso-8859-1?Q?Javier_Fernandez-Sanguino_Pe=F1a?= <jfernandez@sgi.es>,
        88729@bugs.debian.org
Cc: devink@sdsc.edu, nessus@list.nessus.org
Message-ID: <20010402203900.A2004@jagor.srce.hr>
References: <3AC89475.C0120595@sgi.es>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
X-Mailer: Mutt 0.95i
In-Reply-To: =?iso-8859-1?Q?=3C3AC89475=2EC0120595=40sgi=2Ees=3E=3B_from_Javier_Ferna?=
 =?iso-8859-1?Q?ndez-Sanguino_Pe=F1a_on_Mon=2C_Apr_02=2C_2001_at_05:02:13?=
 =?iso-8859-1?Q?PM_+0200?=
Content-Transfer-Encoding: quoted-printable
X-MIME-Autoconverted: from 8bit to quoted-printable by jagor.srce.hr id UAA03008
Delivered-To: 88729@bugs.debian.org

On Mon, Apr 02, 2001 at 05:02:13PM +0200, Javier Fernandez-Sanguino Pe=F1=
a wrote:
> Devin Kowatch commented in the nessus mailing list that there is a patc=
h
> availiable for the SIGHUP issue.... FYI

> >Just about anything that sends a SIGHUP to nessusd will cause any acti=
ve
> >scans to hang.  This means that nessus-update-plugins will cause a sca=
n
> >to hang as well.

There should be another way to make nessusd reopen its log files, without
causing that.

> >However, this is less of a problem as you can run nessus-update-plugin=
s
> >out of cron due to it's use of lynx.=20

Let me guess -- Lynx dies when run from crontab with an error message abo=
ut
the display or the terminal? Export the TERM variable in the crontab for =
a
workaround, if that is the case.

> >Check www.nessus.com/patches for a fix.

Did you mean this:
http://www.nessus.com/patches/nessus/incoming?id=3D10;user=3Dguest;addsig=
nature=3D1

--=20
Digital Electronic Being Intended for Assassination and Nullification

(Please CC: messages to me)




<strong>Acknowledgement sent</strong> to <code>Josip Rodin &lt;jrodin@public.srce.hr&gt;</code>:<br>
Extra info received and forwarded to list.  Copy sent to <code>Josip Rodin &lt;jrodin@jagor.srce.hr&gt;</code>.


-t

From: owner@bugs.debian.org (Debian Bug Tracking System)
To: Josip Rodin <jrodin@public.srce.hr>
Subject: Bug#88729: Info received (was Bug#88729: Patch for this bug)
Message-ID: <handler.88729.B88729.9862367719823.ackinfo@bugs.debian.org>
In-Reply-To: <20010402203900.A2004@jagor.srce.hr>
References: <20010402203900.A2004@jagor.srce.hr>
X-Debian-PR-Message: ack-info-maintonly 88729

Thank you for the additional information you have supplied regarding
this problem report.  It has been forwarded to the developer(s) and
to the developers mailing list to accompany the original report.

Your message has been sent to the package maintainer(s):
 Josip Rodin <jrodin@jagor.srce.hr>

If you wish to continue to submit further information on your problem,
please send it to 88729@bugs.debian.org, as before.

Please do not reply to the address at the top of this message,
unless you wish to report a problem with the Bug-tracking system.

Darren Benham
(administrator, Debian Bugs database)



Received: (at 88729) by bugs.debian.org; 2 Apr 2001 18:39:31 +0000
From jrodin@jagor.srce.hr Mon Apr 02 13:39:31 2001
Return-path: <jrodin@jagor.srce.hr>
Received: from jagor.srce.hr [161.53.2.130] (jrodin)
	by master.debian.org with esmtp (Exim 3.12 1 (Debian))
	id 14k9Eg-0002Y9-00; Mon, 02 Apr 2001 13:39:30 -0500
Received: (from jrodin@localhost)
	by jagor.srce.hr (8.9.0/8.9.0) id UAA03008;
	Mon, 2 Apr 2001 20:39:01 +0200 (MET DST)
Date: Mon, 2 Apr 2001 20:39:00 +0200
From: Josip Rodin <jrodin@public.srce.hr>
To: =?iso-8859-1?Q?Javier_Fernandez-Sanguino_Pe=F1a?= <jfernandez@sgi.es>,
        88729@bugs.debian.org
Cc: devink@sdsc.edu, nessus@list.nessus.org
Subject: Re: Bug#88729: Patch for this bug
Message-ID: <20010402203900.A2004@jagor.srce.hr>
References: <3AC89475.C0120595@sgi.es>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
X-Mailer: Mutt 0.95i
In-Reply-To: =?iso-8859-1?Q?=3C3AC89475=2EC0120595=40sgi=2Ees=3E=3B_from_Javier_Ferna?=
 =?iso-8859-1?Q?ndez-Sanguino_Pe=F1a_on_Mon=2C_Apr_02=2C_2001_at_05:02:13?=
 =?iso-8859-1?Q?PM_+0200?=
Content-Transfer-Encoding: quoted-printable
X-MIME-Autoconverted: from 8bit to quoted-printable by jagor.srce.hr id UAA03008
Delivered-To: 88729@bugs.debian.org

On Mon, Apr 02, 2001 at 05:02:13PM +0200, Javier Fernandez-Sanguino Pe=F1=
a wrote:
> Devin Kowatch commented in the nessus mailing list that there is a patc=
h
> availiable for the SIGHUP issue.... FYI

> >Just about anything that sends a SIGHUP to nessusd will cause any acti=
ve
> >scans to hang.  This means that nessus-update-plugins will cause a sca=
n
> >to hang as well.

There should be another way to make nessusd reopen its log files, without
causing that.

> >However, this is less of a problem as you can run nessus-update-plugin=
s
> >out of cron due to it's use of lynx.=20

Let me guess -- Lynx dies when run from crontab with an error message abo=
ut
the display or the terminal? Export the TERM variable in the crontab for =
a
workaround, if that is the case.

> >Check www.nessus.com/patches for a fix.

Did you mean this:
http://www.nessus.com/patches/nessus/incoming?id=3D10;user=3Dguest;addsig=
nature=3D1

--=20
Digital Electronic Being Intended for Assassination and Nullification

(Please CC: messages to me)




<strong>Information forwarded</strong> to <code>debian-bugs-dist@lists.debian.org, Josip Rodin &lt;jrodin@jagor.srce.hr&gt;</code>:<br>
<code>Bug#88729</code>; Package <code>nessusd</code>.


debian-bugs-dist@lists.debian.orgJosip Rodin <jrodin@jagor.srce.hr>

Subject: Bug#88729: Patch for this bug
Reply-To: Devin Kowatch <devink@SDSC.EDU>, 88729@bugs.debian.org
Resent-From: Devin Kowatch <devink@SDSC.EDU>
Resent-To: debian-bugs-dist@lists.debian.org
Resent-CC: Josip Rodin <jrodin@jagor.srce.hr>
Resent-Date: Mon, 02 Apr 2001 20:03:29 GMT
Resent-Message-ID: <handler.88729.B88729.9862411991929@bugs.debian.org>
Resent-Sender: owner@bugs.debian.org
X-Debian-PR-Message: report 88729
X-Debian-PR-Package: nessusd
X-Debian-PR-Keywords: 
X-Loop: owner@bugs.debian.org
Received: via spool by 88729-bugs@bugs.debian.org id=B88729.9862411991929
          (code B ref 88729); Mon, 02 Apr 2001 20:03:29 GMT
Date: Mon, 2 Apr 2001 12:52:58 -0700
From: Devin Kowatch <devink@SDSC.EDU>
To: Josip Rodin <jrodin@public.srce.hr>
Cc: Javier Fernandez-Sanguino Pe?a <jfernandez@sgi.es>, 88729@bugs.debian.org,
        nessus@list.nessus.org
Message-ID: <20010402125257.K2460@SDSC.EDU>
Mail-Followup-To: Devin Kowatch <devink@SDSC.EDU>,
	Josip Rodin <jrodin@public.srce.hr>,
	Javier Fernandez-Sanguino Pe?a <jfernandez@sgi.es>,
	88729@bugs.debian.org, nessus@list.nessus.org
References: <3AC89475.C0120595@sgi.es> <20010402203900.A2004@jagor.srce.hr>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20010402203900.A2004@jagor.srce.hr>; from jrodin@public.srce.hr on Mon, Apr 02, 2001 at 08:39:00PM +0200
Content-Transfer-Encoding: quoted-printable
X-MIME-Autoconverted: from 8bit to quoted-printable by postal.sdsc.edu id MAA24072
Delivered-To: 88729@bugs.debian.org

On Mon, Apr 02, 2001 at 08:39:00PM +0200, Josip Rodin wrote:
> On Mon, Apr 02, 2001 at 05:02:13PM +0200, Javier Fernandez-Sanguino Pe=F1=
a wrote:
> > Devin Kowatch commented in the nessus mailing list that there is a pa=
tch
> > availiable for the SIGHUP issue.... FYI

Nope, no fix for the sighup problem, just the lynx+cron one.
>=20
> > >Just about anything that sends a SIGHUP to nessusd will cause any ac=
tive
> > >scans to hang.  This means that nessus-update-plugins will cause a s=
can
> > >to hang as well.
>=20
> There should be another way to make nessusd reopen its log files, witho=
ut
> causing that.

Thinking about this, I may actually be mistaken.  Right now I'm working o=
n a
problem with nessus that involves scanning a blackholed host.  Meaning th=
at it
doesn't respond to any packets sent to non-open ports.  This has resulted=
 in scans
that take > 1day to complete (the rest of the network was done in a few h=
ours).
I may have assumed that the connect had hung, when in fact nessusd was st=
ill
going, but not reporting anything because it was still trying to portscan=
 that
box.  I only discovered this after leaving the scan running all weekend. =
 There
were no log entries between 7pm on friday and about 9am on Sunday.  Howev=
er,
nessusd did not get a SIGHUP in that period (commented out everything whi=
ch would
send it one).

So I really can't say if I have encountered this problem or not.

>=20
> > >However, this is less of a problem as you can run nessus-update-plug=
ins
> > >out of cron due to it's use of lynx.=20
>=20
> Let me guess -- Lynx dies when run from crontab with an error message a=
bout
> the display or the terminal? Export the TERM variable in the crontab fo=
r a
> workaround, if that is the case.

Yep, that would be the case.  I decided that wget was a better answer.
>=20
> > >Check www.nessus.com/patches for a fix.
>=20
> Did you mean this:
> http://www.nessus.com/patches/nessus/incoming?id=3D10;user=3Dguest;adds=
ignature=3D1

Yea, that would be the one.  It is a patch which causes nessus-update-plu=
gins to
use wget rather than lynx (lynx can still be used, the choice is made at =
configure
time).

>=20
> --=20
> Digital Electronic Being Intended for Assassination and Nullification
>=20
> (Please CC: messages to me)




<strong>Acknowledgement sent</strong> to <code>Devin Kowatch &lt;devink@SDSC.EDU&gt;</code>:<br>
Extra info received and forwarded to list.  Copy sent to <code>Josip Rodin &lt;jrodin@jagor.srce.hr&gt;</code>.


-t

From: owner@bugs.debian.org (Debian Bug Tracking System)
To: Devin Kowatch <devink@SDSC.EDU>
Subject: Bug#88729: Info received (was Bug#88729: Patch for this bug)
Message-ID: <handler.88729.B88729.9862411991929.ackinfo@bugs.debian.org>
In-Reply-To: <20010402125257.K2460@SDSC.EDU>
References: <20010402125257.K2460@SDSC.EDU>
X-Debian-PR-Message: ack-info-maintonly 88729

Thank you for the additional information you have supplied regarding
this problem report.  It has been forwarded to the developer(s) and
to the developers mailing list to accompany the original report.

Your message has been sent to the package maintainer(s):
 Josip Rodin <jrodin@jagor.srce.hr>

If you wish to continue to submit further information on your problem,
please send it to 88729@bugs.debian.org, as before.

Please do not reply to the address at the top of this message,
unless you wish to report a problem with the Bug-tracking system.

Darren Benham
(administrator, Debian Bugs database)



Received: (at 88729) by bugs.debian.org; 2 Apr 2001 19:53:19 +0000
From devink@sdsc.edu Mon Apr 02 14:53:19 2001
Return-path: <devink@sdsc.edu>
Received: from postal.sdsc.edu [132.249.20.114] ([M/ZiHBx+DQVZU7E2/s7cJXzO0k0WKhb9])
	by master.debian.org with esmtp (Exim 3.12 1 (Debian))
	id 14kAO6-0000V2-00; Mon, 02 Apr 2001 14:53:19 -0500
Received: from empire.sdsc.edu (IDENT:g0fpeJ50+mVEYCHePKvHxcyjIl7uS9im@empire.sdsc.edu [132.249.22.109])
	by postal.sdsc.edu (8.9.3/8.9.3/SDSCserver-16) with ESMTP id MAA24072;
	Mon, 2 Apr 2001 12:52:59 -0700 (PDT)
Received: by empire (8.9.3+Sun/1.11-SolarisClient)
	id MAA27517; Mon, 2 Apr 2001 12:52:58 -0700 (PDT)
Date: Mon, 2 Apr 2001 12:52:58 -0700
From: Devin Kowatch <devink@SDSC.EDU>
To: Josip Rodin <jrodin@public.srce.hr>
Cc: Javier Fernandez-Sanguino Pe?a <jfernandez@sgi.es>, 88729@bugs.debian.org,
        nessus@list.nessus.org
Subject: Re: Bug#88729: Patch for this bug
Message-ID: <20010402125257.K2460@SDSC.EDU>
Mail-Followup-To: Devin Kowatch <devink@SDSC.EDU>,
	Josip Rodin <jrodin@public.srce.hr>,
	Javier Fernandez-Sanguino Pe?a <jfernandez@sgi.es>,
	88729@bugs.debian.org, nessus@list.nessus.org
References: <3AC89475.C0120595@sgi.es> <20010402203900.A2004@jagor.srce.hr>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20010402203900.A2004@jagor.srce.hr>; from jrodin@public.srce.hr on Mon, Apr 02, 2001 at 08:39:00PM +0200
Content-Transfer-Encoding: quoted-printable
X-MIME-Autoconverted: from 8bit to quoted-printable by postal.sdsc.edu id MAA24072
Delivered-To: 88729@bugs.debian.org

On Mon, Apr 02, 2001 at 08:39:00PM +0200, Josip Rodin wrote:
> On Mon, Apr 02, 2001 at 05:02:13PM +0200, Javier Fernandez-Sanguino Pe=F1=
a wrote:
> > Devin Kowatch commented in the nessus mailing list that there is a pa=
tch
> > availiable for the SIGHUP issue.... FYI

Nope, no fix for the sighup problem, just the lynx+cron one.
>=20
> > >Just about anything that sends a SIGHUP to nessusd will cause any ac=
tive
> > >scans to hang.  This means that nessus-update-plugins will cause a s=
can
> > >to hang as well.
>=20
> There should be another way to make nessusd reopen its log files, witho=
ut
> causing that.

Thinking about this, I may actually be mistaken.  Right now I'm working o=
n a
problem with nessus that involves scanning a blackholed host.  Meaning th=
at it
doesn't respond to any packets sent to non-open ports.  This has resulted=
 in scans
that take > 1day to complete (the rest of the network was done in a few h=
ours).
I may have assumed that the connect had hung, when in fact nessusd was st=
ill
going, but not reporting anything because it was still trying to portscan=
 that
box.  I only discovered this after leaving the scan running all weekend. =
 There
were no log entries between 7pm on friday and about 9am on Sunday.  Howev=
er,
nessusd did not get a SIGHUP in that period (commented out everything whi=
ch would
send it one).

So I really can't say if I have encountered this problem or not.

>=20
> > >However, this is less of a problem as you can run nessus-update-plug=
ins
> > >out of cron due to it's use of lynx.=20
>=20
> Let me guess -- Lynx dies when run from crontab with an error message a=
bout
> the display or the terminal? Export the TERM variable in the crontab fo=
r a
> workaround, if that is the case.

Yep, that would be the case.  I decided that wget was a better answer.
>=20
> > >Check www.nessus.com/patches for a fix.
>=20
> Did you mean this:
> http://www.nessus.com/patches/nessus/incoming?id=3D10;user=3Dguest;adds=
ignature=3D1

Yea, that would be the one.  It is a patch which causes nessus-update-plu=
gins to
use wget rather than lynx (lynx can still be used, the choice is made at =
configure
time).

>=20
> --=20
> Digital Electronic Being Intended for Assassination and Nullification
>=20
> (Please CC: messages to me)




<strong>Acknowledgement sent</strong> to <code>Devin Kowatch &lt;devink@SDSC.EDU&gt;</code>:<br>
Extra info received and filed, but not forwarded.


-t

From: owner@bugs.debian.org (Debian Bug Tracking System)
To: Devin Kowatch <devink@SDSC.EDU>
Subject: Bug#88729: Info received and FILED only
         (was nessus scans hanging when logs are rotated.)
Message-ID: <handler.88729.Q88729.98703349330335.ackinfoquiet@bugs.debian.org>
In-Reply-To: <20010411131142.W628@SDSC.EDU>
References: <20010411131142.W628@SDSC.EDU>
X-Debian-PR-Message: ack-info-quiet 88729

Thank you for the additional information you have supplied regarding
this problem report.  It has NOT been forwarded to the developers, but
will accompany the original report in the Bug tracking system.  Please
ensure that you yourself have sent a copy of the additional
information to any relevant developers or mailing lists.

If you wish to continue to submit further information on your problem,
please send it to 88729-quiet@bugs.debian.org, as before.

Please do not reply to the address at the top of this message,
unless you wish to report a problem with the Bug-tracking system.

Darren Benham
(administrator, Debian Bugs database)



Received: (at 88729-quiet) by bugs.debian.org; 11 Apr 2001 23:58:13 +0000
From jrodin@jagor.srce.hr Wed Apr 11 18:58:13 2001
Return-path: <jrodin@jagor.srce.hr>
Received: from jagor.srce.hr [161.53.2.130] (jrodin)
	by master.debian.org with esmtp (Exim 3.12 1 (Debian))
	id 14nUV2-0007tD-00; Wed, 11 Apr 2001 18:58:13 -0500
Received: (from jrodin@localhost)
	by jagor.srce.hr (8.9.0/8.9.0) id BAA01007
	for 88729-quiet@bugs.debian.org; Thu, 12 Apr 2001 01:58:10 +0200 (MET DST)
Resent-Message-Id: <200104112358.BAA01007@jagor.srce.hr>
Received: from postal.sdsc.edu (IDENT:LU6copxSi73eKfhXUUtm9HsT36nQGdWN@postal.sdsc.edu [132.249.20.114])
	by jagor.srce.hr (8.9.0/8.9.0) with ESMTP id WAA01248
	for <jrodin@public.srce.hr>; Wed, 11 Apr 2001 22:11:44 +0200 (MET DST)
Received: from empire.sdsc.edu (IDENT:ukQSvVeFNC6xSeKScuj+pKQuB6boE+Q0@empire.sdsc.edu [132.249.22.109])
	by postal.sdsc.edu (8.9.3/8.9.3/SDSCserver-16) with ESMTP id NAA06056
	for <jrodin@public.srce.hr>; Wed, 11 Apr 2001 13:11:41 -0700 (PDT)
Received: by empire (8.9.3+Sun/1.11-SolarisClient)
	id NAA25448; Wed, 11 Apr 2001 13:11:42 -0700 (PDT)
Date: Wed, 11 Apr 2001 13:11:42 -0700
From: Devin Kowatch <devink@SDSC.EDU>
To: Josip Rodin <jrodin@public.srce.hr>
Subject: nessus scans hanging when logs are rotated.
Message-ID: <20010411131142.W628@SDSC.EDU>
References: <3AC89475.C0120595@sgi.es> <20010402203900.A2004@jagor.srce.hr>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20010402203900.A2004@jagor.srce.hr>; from jrodin@public.srce.hr on Mon, Apr 02, 2001 at 08:39:00PM +0200
Resent-From: jrodin@public.srce.hr
Resent-Date: Thu, 12 Apr 2001 01:58:10 +0200
Resent-To: 88729-quiet@bugs.debian.org
Delivered-To: 88729-quiet@bugs.debian.org


Hi,

I was doing some semi related testing, and discovered some interesting things
about the behaviour of nessusd when it has it's logs rotated out from under it.

You may find this interesting as I know this bug has come up with debian.

You may also already know about this behaviour.  Nothing here is an actual fix,
but I does provide some good leads for fixing it.

The actions preformed were (while a scan was running):
/usr/local/var/nessus# mv nessusd.messages nessusd.messages.old
/usr/local/var/nessus# mv nessusd.dump nessusd.dump.old
/usr/local/var/nessus# kill -HUP `cat nessusd.pid`

At this point a `tail -f nessusd.messages` would imply that the scan has hung.  A
scan that was very active a few seconds ago, is now not reporting anything.

However, a `tail -f nessusd.messages.old` will reveal that the scan is alive and
well, but still loggin to the old log file.  Next, logrotate will probably try to
compress the old logfile, which will lead to one of two situations, depding on how
gzip works:
    1) nessusd is writing it's logs to a deleted file.  To be lost when the file
    is closed.
    2) something bad, that messes with gzip.


The obvious conclusion from all this is that nessusd is not properly handling
reopening files in it's children nessus processes.   

Note that all these tests were done without --enable-pthreads.


Well, I hope that helps some.

-- 
Devin Kowatch
devin@sdsc.edu




<strong>Information forwarded</strong> to <code>debian-bugs-dist@lists.debian.org, Javier Fernandez-Sanguino Pen~a &lt;jfs@debian.org&gt;</code>:<br>
<code>Bug#88729</code>; Package <code>nessusd</code>.


debian-bugs-dist@lists.debian.orgJavier Fernandez-Sanguino Pen~a <jfs@debian.org>

X-Loop: owner@bugs.debian.org
Subject: Bug#88729: simple workaround
Reply-To: =?UTF-8?Q?"Mart=C3=ADn?= Ferrari" <martin.ferrari@gmail.com>, 88729@bugs.debian.org
Resent-From: =?UTF-8?Q?"Mart=C3=ADn?= Ferrari" <martin.ferrari@gmail.com>
Resent-To: debian-bugs-dist@lists.debian.org
Resent-CC: Javier Fernandez-Sanguino Pen~a <jfs@debian.org>
Resent-Date: Mon, 31 Mar 2008 19:09:09 +0000
Resent-Message-ID: <handler.88729.B88729.120699019915147@bugs.debian.org>
Resent-Sender: owner@bugs.debian.org
X-Debian-PR-Message: report 88729
X-Debian-PR-Package: nessusd
X-Debian-PR-Keywords: 
X-Debian-PR-Source: nessus-core
Received: via spool by 88729-submit@bugs.debian.org id=B88729.120699019915147
          (code B ref 88729); Mon, 31 Mar 2008 19:09:09 +0000
Received: (at 88729) by bugs.debian.org; 31 Mar 2008 19:03:19 +0000
X-Spam-Checker-Version: SpamAssassin 3.1.4-bugs.debian.org_2005_01_02 
	(2006-07-26) on rietz.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.0 required=4.0 tests=BAYES_00 autolearn=no 
	version=3.1.4-bugs.debian.org_2005_01_02
Received: from rn-out-0910.google.com ([64.233.170.187])
	by rietz.debian.org with esmtp (Exim 4.63)
	(envelope-from <martin.ferrari@gmail.com>)
	id 1JgPHr-0003w3-KK
	for 88729@bugs.debian.org; Mon, 31 Mar 2008 19:03:19 +0000
Received: by rn-out-0910.google.com with SMTP id e11so658656rng.17
        for <88729@bugs.debian.org>; Mon, 31 Mar 2008 12:03:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=beta;
        h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
        bh=kuHTBSP9llAKW7KMP1QggaZWteqkG1oWB3wZGUf6fJY=;
        b=lUew8A3GeZ/2bvKMwUlvFJkKaONkfaJszNRcjAbp0gcEqVFtJFYMUyk45s49Gdqwk//sYUEYBO7eqtVRoC0oDU/JnAlnaweCctpe+89DoK6KEunP9yMqK0N78AXekbiZccT5shNfflz8GF5FGHGJS1+h1HeRGflw5hqOoMeFIow=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
        b=SLkDHVWJpgnd0icvS/uIiKvX0TfWUbi9Z0MnPF6JAIY5LBtoXbg8GFH1WeCwF421BvPJoBurI4kVKaq+QNe8YkcqTN6GpvAkWOZvtdhmMq4XDPE0uwphdVH3B9dqQ0Wz0J9PjAIId+iJ9DrBDbSYBnXKLhzYOxkeNp+yQyLfziM=
Received: by 10.115.109.1 with SMTP id l1mr10652904wam.90.1206990198635;
        Mon, 31 Mar 2008 12:03:18 -0700 (PDT)
Received: by 10.114.201.6 with HTTP; Mon, 31 Mar 2008 12:03:18 -0700 (PDT)
Message-ID: <b9800b70803311203r46f69bd1rd8be9614e3558d6e@mail.gmail.com>
Date: Mon, 31 Mar 2008 16:03:18 -0300
From: =?UTF-8?Q?"Mart=C3=ADn?= Ferrari" <martin.ferrari@gmail.com>
To: 88729@bugs.debian.org
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

Since I think that this problem is still present in sarge at least, I
think a easy workarond is just to use "copytruncate" in logrotate and
remove the postrotate script.

--=20
Mart=EDn Ferrari





<strong>Acknowledgement sent</strong> to <code>&quot;Martín Ferrari&quot; &lt;martin.ferrari@gmail.com&gt;</code>:<br>
Extra info received and forwarded to list.  Copy sent to <code>Javier Fernandez-Sanguino Pen~a &lt;jfs@debian.org&gt;</code>.


-t

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.420 (Entity 5.420)
Content-Type: text/plain; charset=utf-8
X-Loop: owner@bugs.debian.org
From: owner@bugs.debian.org (Debian Bug Tracking System)
To: =?UTF-8?Q?"Mart=C3=ADn?= Ferrari" <martin.ferrari@gmail.com>
Subject: Bug#88729: Info received (simple workaround)
Message-ID: <handler.88729.B88729.120699019915147.ackinfo@bugs.debian.org>
References: <b9800b70803311203r46f69bd1rd8be9614e3558d6e@mail.gmail.com>
X-Debian-PR-Message: ack-info 88729
X-Debian-PR-Package: nessusd
X-Debian-PR-Source: nessus-core
Reply-To: 88729@bugs.debian.org


Thank you for the additional information you have supplied regarding
this Bug report.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 Javier Fernandez-Sanguino Pen~a <jfs@debian.org>

If you wish to submit further information on this problem, please
send it to 88729@bugs.debian.org, as before.

Please do not send mail to owner@bugs.debian.org unless you wish
to report a problem with the Bug-tracking system.


--=20
88729: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D88729
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems



Received: (at 88729) by bugs.debian.org; 31 Mar 2008 19:03:19 +0000
From martin.ferrari@gmail.com Mon Mar 31 19:03:19 2008
X-Spam-Checker-Version: SpamAssassin 3.1.4-bugs.debian.org_2005_01_02 
	(2006-07-26) on rietz.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.0 required=4.0 tests=BAYES_00 autolearn=no 
	version=3.1.4-bugs.debian.org_2005_01_02
Return-path: <martin.ferrari@gmail.com>
Received: from rn-out-0910.google.com ([64.233.170.187])
	by rietz.debian.org with esmtp (Exim 4.63)
	(envelope-from <martin.ferrari@gmail.com>)
	id 1JgPHr-0003w3-KK
	for 88729@bugs.debian.org; Mon, 31 Mar 2008 19:03:19 +0000
Received: by rn-out-0910.google.com with SMTP id e11so658656rng.17
        for <88729@bugs.debian.org>; Mon, 31 Mar 2008 12:03:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=beta;
        h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
        bh=kuHTBSP9llAKW7KMP1QggaZWteqkG1oWB3wZGUf6fJY=;
        b=lUew8A3GeZ/2bvKMwUlvFJkKaONkfaJszNRcjAbp0gcEqVFtJFYMUyk45s49Gdqwk//sYUEYBO7eqtVRoC0oDU/JnAlnaweCctpe+89DoK6KEunP9yMqK0N78AXekbiZccT5shNfflz8GF5FGHGJS1+h1HeRGflw5hqOoMeFIow=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
        b=SLkDHVWJpgnd0icvS/uIiKvX0TfWUbi9Z0MnPF6JAIY5LBtoXbg8GFH1WeCwF421BvPJoBurI4kVKaq+QNe8YkcqTN6GpvAkWOZvtdhmMq4XDPE0uwphdVH3B9dqQ0Wz0J9PjAIId+iJ9DrBDbSYBnXKLhzYOxkeNp+yQyLfziM=
Received: by 10.115.109.1 with SMTP id l1mr10652904wam.90.1206990198635;
        Mon, 31 Mar 2008 12:03:18 -0700 (PDT)
Received: by 10.114.201.6 with HTTP; Mon, 31 Mar 2008 12:03:18 -0700 (PDT)
Message-ID: <b9800b70803311203r46f69bd1rd8be9614e3558d6e@mail.gmail.com>
Date: Mon, 31 Mar 2008 16:03:18 -0300
From: "=?ISO-8859-1?Q?Mart=EDn_Ferrari?=" <martin.ferrari@gmail.com>
To: 88729@bugs.debian.org
Subject: simple workaround
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

Since I think that this problem is still present in sarge at least, I
think a easy workarond is just to use "copytruncate" in logrotate and
remove the postrotate script.

--=20
Mart=EDn Ferrari





<strong>Information stored</strong>:<br>
<code>Bug#88729</code>; Package <code>nessusd</code>.


-t

X-Loop: owner@bugs.debian.org
Subject: Bug#88729: Du hast noch mehr SpaB beim se ..
Reply-To: "Marcus Lamb" <teimomg@ve.clinique.com>, 88729-quiet@bugs.debian.org
Resent-From: "Marcus Lamb" <teimomg@ve.clinique.com>
Resent-To: 
Resent-Date: Fri, 05 Sep 2008 03:22:32 +0000
Resent-Message-ID: <handler.88729.Q88729.122058437821671@bugs.debian.org>
Resent-Sender: owner@bugs.debian.org
X-Debian-PR-Message: followup 88729
X-Debian-PR-Package: nessusd
X-Debian-PR-Keywords: 
X-Debian-PR-Source: nessus-core
Received: via spool by 88729-quiet@bugs.debian.org id=Q88729.122058437821671
          (code Q ref 88729); Fri, 05 Sep 2008 03:22:32 +0000
Received: (at 88729-quiet) by bugs.debian.org; 5 Sep 2008 03:12:58 +0000
X-Spam-Checker-Version: SpamAssassin 3.2.3-bugs.debian.org_2005_01_02
	(2007-08-08) on rietz.debian.org
X-Spam-Level: ***
X-Spam-Status: No, score=3.5 required=4.0 tests=MULTALT,NEXTPART autolearn=no
	version=3.2.3-bugs.debian.org_2005_01_02
Received: from [123.19.75.117]
	by rietz.debian.org with esmtp (Exim 4.63)
	(envelope-from <teimomg@ve.clinique.com>)
	id 1KbRkm-00052W-Nq; Fri, 05 Sep 2008 03:12:57 +0000
Received: from [123.19.75.117] by ve.clinique.com.s7a1.psmtp.com; Fri, 5 Sep 2008 10:12:47 +0700
From: "Marcus Lamb" <teimomg@ve.clinique.com>
To: <88486@bugs.debian.org>
Date: Fri, 5 Sep 2008 10:12:47 +0700
Message-ID: <01c90f3f$f1bfb980$754b137b@teimomg>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0006_01C90F3F.F1BFB980"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.2627
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506
Importance: Normal

This is a multi-part message in MIME format.

------=_NextPart_000_0006_01C90F3F.F1BFB980
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

Mein Kumpel hat es ausprobiert: Ori VI reze fre im Internet bestellen ist ganz einfach und ja seitdem er VI nimmt, ist seine Frau wieder richtig zufrieden mit ihm.

http://describerich.com

------=_NextPart_000_0006_01C90F3F.F1BFB980
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-mi=
crosoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:wo=
rd" xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; charset=3Diso-885=
9-1">


<meta name=3DProgId content=3DWord.Document>
<meta name=3DGenerator content=3D"Microsoft Word 10">
<meta name=3DOriginator content=3D"Microsoft Word 10">
<link rel=3DFile-List href=3D"cid:filelist.xml@BF6E8213.DA051A0C">
<link rel=3DEdit-Time-Data href=3D"cid:editdata.mso@BF6E8213.DA051A0C">
</head>
<body>
Mein Kumpel hat es ausprobiert: Ori VI reze fre im Internet bestellen ist=
 ganz einfach und ja seitdem er VI nimmt, ist seine Frau wieder richtig z=
ufrieden mit ihm.
<br><br>
<a href=3D"http://describerich.com">http://describerich.com</a>
</body>
</html>

------=_NextPart_000_0006_01C90F3F.F1BFB980--








<strong>Acknowledgement sent</strong> to <code>&quot;Marcus Lamb&quot; &lt;teimomg@ve.clinique.com&gt;</code>:<br>
Extra info received and filed, but not forwarded.


-t

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.420 (Entity 5.420)
Content-Type: text/plain; charset=utf-8
X-Loop: owner@bugs.debian.org
From: owner@bugs.debian.org (Debian Bug Tracking System)
To: "Marcus Lamb" <teimomg@ve.clinique.com>
Subject: Bug#88729: Info received and FILED only (Du hast noch mehr SpaB 
 beim se ..)
Message-ID: <handler.88729.Q88729.122058437821671.ackinfoquiet@bugs.debian.org>
References: <01c90f3f$f1bfb980$754b137b@teimomg>
X-Debian-PR-Message: ack-info-quiet 88729
X-Debian-PR-Package: nessusd
X-Debian-PR-Source: nessus-core
Reply-To: 88729-quiet@bugs.debian.org


Thank you for the additional information you have supplied regarding
this Bug report.

This is an automatically generated reply to let you know your message
has been received.

Your message has not been forwarded to the package maintainers or
other interested parties; you should ensure that the developers are
aware of the problem you have entered into the system - preferably
quoting the Bug reference number, #88729.

If you wish to submit further information on this problem, please
send it to 88729-quiet@bugs.debian.org, as before.

Please do not send mail to owner@bugs.debian.org unless you wish
to report a problem with the Bug-tracking system.


--=20
88729: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D88729
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems



Received: (at 88729-quiet) by bugs.debian.org; 5 Sep 2008 03:12:58 +0000
From teimomg@ve.clinique.com Fri Sep 05 03:12:58 2008
X-Spam-Checker-Version: SpamAssassin 3.2.3-bugs.debian.org_2005_01_02
	(2007-08-08) on rietz.debian.org
X-Spam-Level: ***
X-Spam-Status: No, score=3.5 required=4.0 tests=MULTALT,NEXTPART autolearn=no
	version=3.2.3-bugs.debian.org_2005_01_02
Return-path: <teimomg@ve.clinique.com>
Received: from [123.19.75.117]
	by rietz.debian.org with esmtp (Exim 4.63)
	(envelope-from <teimomg@ve.clinique.com>)
	id 1KbRkm-00052W-Nq; Fri, 05 Sep 2008 03:12:57 +0000
Received: from [123.19.75.117] by ve.clinique.com.s7a1.psmtp.com; Fri, 5 Sep 2008 10:12:47 +0700
From: "Marcus Lamb" <teimomg@ve.clinique.com>
To: <88486@bugs.debian.org>
Subject: Du hast noch mehr SpaB beim se ..
Date: Fri, 5 Sep 2008 10:12:47 +0700
Message-ID: <01c90f3f$f1bfb980$754b137b@teimomg>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0006_01C90F3F.F1BFB980"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.2627
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506
Importance: Normal

This is a multi-part message in MIME format.

------=_NextPart_000_0006_01C90F3F.F1BFB980
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

Mein Kumpel hat es ausprobiert: Ori VI reze fre im Internet bestellen ist ganz einfach und ja seitdem er VI nimmt, ist seine Frau wieder richtig zufrieden mit ihm.

http://describerich.com

------=_NextPart_000_0006_01C90F3F.F1BFB980
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-mi=
crosoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:wo=
rd" xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; charset=3Diso-885=
9-1">


<meta name=3DProgId content=3DWord.Document>
<meta name=3DGenerator content=3D"Microsoft Word 10">
<meta name=3DOriginator content=3D"Microsoft Word 10">
<link rel=3DFile-List href=3D"cid:filelist.xml@BF6E8213.DA051A0C">
<link rel=3DEdit-Time-Data href=3D"cid:editdata.mso@BF6E8213.DA051A0C">
</head>
<body>
Mein Kumpel hat es ausprobiert: Ori VI reze fre im Internet bestellen ist=
 ganz einfach und ja seitdem er VI nimmt, ist seine Frau wieder richtig z=
ufrieden mit ihm.
<br><br>
<a href=3D"http://describerich.com">http://describerich.com</a>
</body>
</html>

------=_NextPart_000_0006_01C90F3F.F1BFB980--