FW: nmap crashing solaris?

["Montgomery, Scott" <Scott_Montgomery () NAI com>]

There are a couple of issues with Solaris dedicating a silly amount of
memory
to the syslogd during the port scan, but when using nmap to SYN and FIN
flood 
the base Solaris 2.6 O/S (no patches, developer system support enabled), it 
doesn't crash.

Killing the syslogd process returns the memory immediately, as does waiting
for the syslogd to finish writing the results of the port scan. 

I looked at Sun's support site to see if there was a syslogd patch to
overcome
the problem.  There is a patch, but it doesn't address this particular
problem.

Hope that helped.

Scott

Scott A. Montgomery
Senior Quality Assurance Engineer, Firewall Technologies        

Network Associates, Inc.          http://www.nai.com
15204 Omega Drive
Rockville, MD  20850


> > Date:        Thu, 25 Feb 1999 13:12:44 -0700 (MST)
> > From:        Zbigniew Indelak <zindelak () telusplanet net>
> > To:  nmap-hackers () insecure org
> > Subject: nmap crashing solaris?
> >
> > I have read some reports that nmap has the ability to crash various 
> > versions of Solaris when scanned with some specific options.  However, 
> I 
> > have not been able to reproduce any negative results on my Solaris 2.6 
> > machine.  Therefore, I don't know if 1) the reports were wrong, 2) my 
> > tests were wrong (wrong options?) 3) my machine has some patch that 
> fixes 
> > the problem.
> >
> > If anybody has seen a SPARC Solaris 2.5.1 or 2.6 machine get affected 
> by 
> > an nmap scan, I would greately appreciate hearing about it.
> >
> > Thank you.
> >
> > Zbigniew Indelak (ZeeBee)    | Tel: (780) 493 - 2665
> > Systems Analyst              | Fax: (780) 493 - 4277
> > TELUS PLAnet                 | email: zindelak () telusplanet net
>
>
> ______________________________________________________
> Get Your Private, Free Email at http://www.hotmail.com