NetTalk Central

NetTalk Web Server => Web Server - Ask For Help => Topic started by: astahl on March 25, 2016, 05:20:12 AM

Title: Penetration Testing
Post by: astahl on March 25, 2016, 05:20:12 AM

Hi All,

We have a bank that wants to do a penetration test on our NetTalk website. They are checking 10 different areas and can take up 6 hrs to complete.They tried but the exe shuts down after a 1 1/2 hour test with 100 requests per minute. What could cause this or what can one set/check to resolve this issue? They think it may be a memory leak in which I have no idea if it does or could it be the thread limit?

They have a username and password so they can inspect all pages.

Using NetTalk9.06 and Clarion 10.12104


Ashley

Title: Re: Penetration Testing
Post by: JPMacDonald on March 26, 2016, 05:30:40 AM

Hi Ashley,

Unlikely to be a thread issue since 100/minute is less than 2 per second and it does run for the first 1.5 hours. Can you elaborate on what happens on each request and what backend database is being used if any?
You could open the task manager and watch to see if the memory being used by the web app continues to climb to an excessive amount during the testing, it isn't a definitive indicator of a memory leak but it may provide a valuable clue.

Regards

Parker

Title: Re: Penetration Testing
Post by: astahl on March 28, 2016, 02:19:46 AM

Hi Parker,

Yes the bank is kind enough to conduct a test during a period that I may monitor these things hopefully today. When I get the information I will post back here on the results.

Thanks

Ashley

Title: Re: Penetration Testing
Post by: Bruce on March 29, 2016, 11:22:09 PM

you may also want to log their requests to file, so if a request does crash the server you know which one it was.

Cheers
Bruce