Thanks for the info. I have found that --update takes about 2.5 hours on this system, whereas --rebuild takes 20 seconds. So I was planning to go with this as my sync procedure:
openvas-nvt-sync openvas-scapdata-sync openvasmd --rebuild /etc/init.d/openvas-scanner restart (Sound ok?) However, I get these errors from the scap update: [i] Updating OVAL data egrep: character class syntax is [[:space:]], not [:space:] egrep: character class syntax is [[:space:]], not [:space:] egrep: character class syntax is [[:space:]], not [:space:] egrep: character class syntax is [[:space:]], not [:space:] egrep: character class syntax is [[:space:]], not [:space:] egrep: character class syntax is [[:space:]], not [:space:] egrep: character class syntax is [[:space:]], not [:space:] egrep: character class syntax is [[:space:]], not [:space:] egrep: character class syntax is [[:space:]], not [:space:] [i] Updating /var/lib/openvas/scap-data/oval/5.10/org.mitre.oval/c/oval.xml [i] Updating /var/lib/openvas/scap-data/oval/5.10/org.mitre.oval/i/oval.xml [i] Updating /var/lib/openvas/scap-data/oval/5.10/org.mitre.oval/m/oval.xml [i] Updating /var/lib/openvas/scap-data/oval/5.10/org.mitre.oval/p/oval.xml [i] Updating /var/lib/openvas/scap-data/oval/5.10/org.mitre.oval/v/family/ios.xml [i] Updating /var/lib/openvas/scap-data/oval/5.10/org.mitre.oval/v/family/macos.xml [i] Updating /var/lib/openvas/scap-data/oval/5.10/org.mitre.oval/v/family/pixos.xml [i] Updating /var/lib/openvas/scap-data/oval/5.10/org.mitre.oval/v/family/unix.xml [i] Updating /var/lib/openvas/scap-data/oval/5.10/org.mitre.oval/v/family/windows.xml [i] No user data directory '/var/lib/openvas/scap-data/private' found. Error: database is locked On Wed, Apr 16, 2014 at 3:07 PM, Matthew Mundell < [email protected]> wrote: > > I have been having a strangely hard time finding solid answers online to > a > > pretty simple question: what is the proper way to fully update the NVTs > in > > an OpenVAS installation? That is, I'm running openvas-nvt-sync, but it > > sounds like you're supposed to run openvasmd --update or openvasmd > > --rebuild afterwards? (I also haven't been able to find good docs on > what > > the difference is between --update and --rebuild....) > > Yes, openvas-nvt-sync is the way. I'm pretty sure you have to restart > openvassd after that. And then --update or --rebuild. > > --update does not lock the manager database, whereas --rebuild does. This > makes --update slower, but allows client access during the update. I think > that at Greenbone we always use --rebuild anyway, because it does not > affect clients for too long. > > -- > Greenbone Networks GmbH > Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 > Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner >
_______________________________________________ Openvas-discuss mailing list [email protected] https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
