maltrail icon indicating copy to clipboard operation
maltrail copied to clipboard
verified publisher icon stamparm

Sensor shutdown

Open 15w34r0n3D4y opened this issue 10 years ago • 6 comments

When I scan IPs range sensor shutdown and need scan again... Where is problem? Is there timeout for sensor or what?

15w34r0n3D4y avatar Dec 23 '15 13:12 15w34r0n3D4y

Well, it waits for the first next SYN (TCP connection attempt) at the sensor after the port scanning. Basically, if you do any kind of connection attempt afterwards it will write the heuristics for the scanning attempt (if any).

stamparm avatar Dec 23 '15 14:12 stamparm

@15w34r0n3D4y please update to the latest revision. Now the "flushing" part (of port scanning heuristics) should occur much often (on any sniffed packet)

stamparm avatar Dec 23 '15 15:12 stamparm

Ok updated but problem still here, sensor shutdown and all I can see sensors restart again and stop on [?] progress: 53/54 (98%) and software which I ping closed too (it is strange).

Now I can't see when is sensor shutdown (no time) and where stop ping (which is latest IP pinged)...

15w34r0n3D4y avatar Dec 27 '15 02:12 15w34r0n3D4y

Most probably memory related. How much RAM do you have there?

stamparm avatar Dec 27 '15 06:12 stamparm

Probably because I have only 1gb.

15w34r0n3D4y avatar Dec 27 '15 07:12 15w34r0n3D4y

@15w34r0n3D4y Hello! After 7 years wanna ask a question: could you re-run the lastest version/revision of Maltrail and to check again. Or can current issue be closed? Thank you!

MikhailKasimov avatar Nov 03 '22 23:11 MikhailKasimov