Plugins for scans

[Michel Arboi]

On Thu Aug 26 2004 at 23:22, Christopher J Bidwell wrote:

> Anyone know why when I conduct a scan that it executes the same plugin
> twice for the same IP being scanned?

find_service forks. You can configure how many children process you
want. 

> This happens for numerous plugins.

get_kb_item("gizmo") will fork if "gizmo" is a list instead of a
single item.

> Just wonder if that's why the state tables on our routers are
> filling up.

Maybe find_service, not the other ones. The port scanners are more
dangerous because they are quicker and tests more ports.
Try to use netstat or snmpwalk, or nmap with "polite" timing (if will
be slooooooooow). 
Also try to reduce the number of simultaneous tests.