Process vulnerability versus NESSUS

[Fedele Giuseppe]

Hello,

I have a process (written in C language) acting as a server, that listens on a socket for connections.

My goal is to make it "secure" versus NESSUS attacks.

I have improved the communication protocol by checking received messages and closing the socket if the message is not the expected one.

My problem is that all socket connections coming from NESSUS process remain in CLOSE_WAIT status and the number of files open in charge of my process grows undefinitely.
(I close the socket by executing shutdown + close)

How can I manage such a issue?

Many thanks

Giuseppe