[Plugins-writers] problems with NASL SSH feature / local checks

b.wolf@private

Hi,

I played a bit with the new local scan / SSH features in
NASL and found a couple of strange things:

1. I tried to write a NASL script to retrieve certain
report files (text files) from a remote machine. My code
looks somewhat like this:

# ... SSH login procedure ...

buf = ssh_cmd(socket:sock, cmd:"cat report.txt", timeout:60);

if (buf) {
	my_report += buf;
}

# ...

security_note(port:port, data:my_report);

Everything works fine with this code but when the report.txt file
reaches a certain size my NASL script simply hangs and times out
after a while. My report file was 350K. I reduced its size in steps
and around a file size of 10K the script starts working again.
Any idea what the problem might be?

2. My second problem is really strange and I'm wondering if I'm
overlooking anything obvious... ;)

It also has to do with the new SSH capability.

I tried a script looking like this

# ... SSH login procedure ...

for (i=1; i<=3; i++) {
  buf = ssh_cmd(socket:sock, cmd:"cat report"+i+".txt", timeout:60);
  if (buf) {
    my_report += buf;
  }
}

security_note(port:port, data:my_report);

It seems this script only executes the first iteration of the loop 
and then silently dies. If I rewrite the script

# ... SSH login procedure ...

buf = ssh_cmd(socket:sock, cmd:"cat report1.txt", timeout:60);
my_report += buf;

buf = ssh_cmd(socket:sock, cmd:"cat report2.txt", timeout:60);
my_report += buf;

buf = ssh_cmd(socket:sock, cmd:"cat report3.txt", timeout:60);
my_report += buf;

security_note(port:port, data:my_report);

then everything works fine. It almost seems like ssh_cmd() and 
for-loops don't like each other.

Does anyone have similar experience? Any suggestions are greatly
appreciated.

Best,
Boris

_______________________________________________
Plugins-writers mailing list
Plugins-writers@private
http://mail.nessus.org/mailman/listinfo/plugins-writers