Internal documentation only
This page has been marked as draft.
Netprobe becomes unresponsive after Qualys Scan
2023-08-19 10:43:35.195-0700 ERROR: NETOBJECTS ORB: Failed to service HTML Request, qualys_chunk_test
2023-08-19 10:43:38.788-0700 ERROR: NETOBJECTS ORB: Failed to service HTML Request,
The Netprobe could encounter problems if unexpected message is received with HTTP chunked transfer encoding.
-
During a Qualys VMDR Vulnerability Scan process, our Netprobe becomes unresponsive, hangs, and there is an observable increase in CPU usage.
-
This causes unreliable monitoring as the Netprobe host is up/normal but our Netprobe appears down on the Gateway.
-
The netprobe eventually becomes disconnected from the gateway and no longer reconnects, but the process/port still remains running.
-
Connections were dropped
-
Due to a combination of Netprobe and the Qualys scan signatures. The finding from our development team is this:
The specific Qualys scan that makes are Netprobe hang is a VMDR Vulnerability scan (Vulnerability Signatures 2.5.817-2, and 2.5.818-3, based on our most recent tests)
- Kindly please upgrade to Geneos version GA6.5. The new version includes a fix for Netprobe to handle unexpected incoming message with HTTP chunked transfer encoding. It is not specific to Qualys signature version.