( So I know when *not* to cron! ) :)
--anon
On 9/2/05, John Scherff <[EMAIL PROTECTED]> wrote:
It's almost as if I'm downloading plugins at precisely the moment when
the tar file has been deposited but before the MD5 has has been
generated. I never have a problem running the script manually during
the daytime.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of John Scherff
Sent: Friday, September 02, 2005 10:19 AM
To: [email protected]
Subject: RE: Problem with nessus-update-plugins.
> Do a 'ls -l all-2.0.tar.gz' and send us the results please, as well as
> the md5 of the tar file you're getting.
Thank you for the quic response.
For the last scheduled update (1:00 a.m. this morning),
The directory created was:
drwx------ 2 root root 4096 Sep 2 01:05
nessus-update-plugins-20505
And the files in the directory are:
-rw------- 1 root root 1025 Sep 2 01:05 all-2.0.sig
-rw------- 1 root root 3558561 Sep 2 01:05 all-2.0.tar.gz
-rw------- 1 root root 56 Sep 2 01:00
all-2.0.tar.gz.md5
The file all-2.0.tar.gz.md5 contains:
MD5 (all-2.0.tar.gz) = b9d6daad3c00f6d5a01df084b75c9e42
When I run md5sum on all-2.0.tar.gz myself, I get this:
caa2abefa52659b7cd124a1a5c94419c all-2.0.tar.gz
I scheduled a cron job to run nessus-update-plugins, this time with the
-vv option, a few minutes ago. It worked. (No changes other than -vv
versus -v. Your car never makes that funny noise for the mechanic,
huh?). Here are the results:
>From <snip>@<snip> Fri Sep 2 10:07:56 2005
Date: Fri, 2 Sep 2005 10:03:00 -0700
From: <snip>@<snip> (Cron Daemon)
To: <snip>@<snip>
Subject: Cron <snip>@<snip> /usr/local/sbin/nessus-update-plugins -vv
X-Cron-Env: <SHELL=/bin/sh>
X-Cron-Env: <HOME=/root>
X-Cron-Env: <PATH=/usr/bin:/bin>
X-Cron-Env: <LOGNAME=root>
+ '[' -z y ']'
+ tar=-xvf
+ '[' '!' -d /usr/local/lib/nessus/plugins ']'
++ pwd
+ cwd=/root
+ tmpdir=
+ test -z ''
+ tmpdir=
+ test -z ''
+ tmpdir=/tmp
+ mkdir -m 0700 /tmp/nessus-update-plugins-21585 cd
+ /tmp/nessus-update-plugins-21585 /usr/local/bin/nessus-fetch
+ --plugins-md5 test -s /usr/local/lib/nessus/plugins/MD5 '[' -x
+ /usr/bin/diff ']'
+ diff /usr/local/lib/nessus/plugins/MD5 all-2.0.tar.gz.md5
+ /usr/local/bin/nessus-fetch --plugins test -x
+ /usr/local/sbin/nessus-check-signature
+ /usr/local/sbin/nessus-check-signature all-2.0.tar.gz all-2.0.sig rm
+ -f all-2.0.sig cd /usr/local/lib/nessus/plugins/ /bin/gzip -cd
+ /tmp/nessus-update-plugins-21585/all-2.0.tar.gz
+ tar -xvf -
./
./04webserver.nasl
./12planet_chat_server_path_disclosure.nasl
./12planet_chat_server_plaintext_password.nasl
./12planet_chat_server_xss.nasl
./2bgal_sql_injection.nasl
...
and on and on
...
./zyxel_http_pwd.nasl
./zyxel_pwd.nasl
+ rm -f /usr/local/lib/nessus/plugins/MD5 mv
+ /tmp/nessus-update-plugins-21585/all-2.0.tar.gz.md5
/usr/local/lib/nessus/p
lugins/MD5
+ cd /root
+ rm -rf /tmp/nessus-update-plugins-21585 chown -R 0:0
+ /usr/local/lib/nessus/plugins/ test -f
+ /usr/local/var/nessus/nessusd.pid
++ cat /usr/local/var/nessus/nessusd.pid
+ pid=21535
+ kill -1 21535
+ exit 0
Regards,
John Scherff
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto: [EMAIL PROTECTED]] On Behalf Of Renaud Deraison
Sent: Friday, September 02, 2005 8:56 AM
To: [email protected]
Subject: Re: Problem with nessus-update-plugins.
On Sep 2, 2005, at 17:40, John Scherff wrote:
> List,
>
> I run nessus-update-plugins via cron on four servers. For the past
> several weeks, the update has failed every time with this error:
>
> all-2.0.sig is not the valid signature for all-2.0.tar.gz
>
> If I locate the directory and files nessus creates under /tmp (e.g.,
> /tmp/nessus-update-plugins-#####), I find all-2.0.sig , all-2.0.tar.gz,
> and all-2.0.tar.gz.md5. If I run nessus-check- signature
> all-2.0.tar.gz all-2.0.sig, I get the same error as above. Same thing
> when I use the md5 signature file.
Do a 'ls -l all-2.0.tar.gz' and send us the results please, as well as
the md5 of the tar file you're getting.
-- Renaud
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
_______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
