IP Stack Drops During Network Scan

[Adam Stahl]

I have two 11.00 boxes that lose their ip stack when we do a simple port scan using nmap. I was looking for a patch(es) that could possibly fix this issue but there are over 1094 patches available for HP-UX 11.00. Can anyone point me in the direction of what patch or patches I would need to correct this issue?

[Tim Nelson]

Adam,

HPUX 11.0 is out of support. I would suggest that you find, if you can, that LAST patch bundle and apply everything that it includes if you have not already done so.

Looks like March of '04
http://www11.itrc.hp.com/service/patch/releasePage.do?BC=main|releaseIndexPage|&releaseId=5013-2091

[Duncan Edmonstone]

Well 11.00 is out of support now, so you may as well just apply the final quality pack (March 2004) if it hasn't already been installed:

ftp://ftp.itrc.hp.com/patch_bundles/hp-ux/QUALITYPACK/QPK1100_B.11.00.64.4.depot

Apart from that the only reference to nmap hanging hosts is if the hosts are running Serviceguard. If you have Serviceguard installed then the patch you need depends on the version. For instance PHSS_32656 is the patch for SG 11.14

HTH

Duncan

[Adam Stahl]

Duncan,

I do have Service Guard 11.12 installed so I will look for the patch.

Thank you

[rick jones]

What exactly do you mean by "lose their ip stack?" Do you mean they lose their ability to send and receive IP datagrams?

[Duncan Edmonstone]

Adam,

I suspect that Serviceguard 11.12 was already out of support before the patch that fixed the nmap issue was released, as I can find no patch for 11.12 that fixes this issue.

The only way to fix this may be to upgrade Serviceguard to the final release for 11.00 which would be 11.14, and then apply the patch for 11.14 which fixes this issue.

I don't want to even think about how you'd go about that sort of upgrade with NO support! If you can't lay your hands on an unprotected copy of Serviceguard 11.14 I'm not even sure how you'll do an upgrade - just getting a CD isn't enough as you'd need a license key to unlock it, and with no support... well you can see this might be a challenge.

This is what tends to happen when you run software out of support...

HTH

Duncan

[Adam Stahl]

Thanks Duncan,

You have been a big help. I guess I'll see if I can get my hands on Serviceguard 11.14.

Thanks again