Hey

I had the same problem (german mailing list), the user had mounted some 
filesystems which were searched too.
take a look at these to options:

GSA -> Configuration -> Scan Configs -> Edit Scan Config -> Options
for Local Security Checks -> Also use 'find' command to search for
Applications -> No.

and

GSA -> Configuration -> Scan Configs -> Edit Scan Config -> Options
for Local Security Checks -> Descend directories on other filesystem
(don't add -xdev to find) -> No.

I only disabled the second Option and that solved my problem. After disabling 
the option (enable -xdev) the find´s are very fast.

Hope its the same for you…

Regards

René Behring


Am 06.06.2014 um 02:33 schrieb Arya Goudarzi <[email protected]>:

> Assuming each NVT explores 1 vulnerability and each vulnerability is 
> associated with 1 binary, then I should see 4 find commands running on the 
> machine at max not 20 since I am running 4 NVTs on a host at a time. Unless, 
> my assumption is wrong.
> 
> 
> On Thu, Jun 5, 2014 at 5:03 PM, Brandon Perry <[email protected]> 
> wrote:
> The finds are used to discover binaries on the file system to perform version 
> checks.
> 
> 
> 
> On Thu, Jun 5, 2014 at 6:56 PM, Arya Goudarzi <[email protected]> wrote:
> Hi,
> 
> I have been using OpenVAS for 3 years now. However, I'd never used the 
> authenticated test feature of it till today. For some reason on some of the 
> target machines, the installed openvas user is executing bunch of 'find' 
> commands. I suppose this is part of a test, but running 10s of finds at the 
> same time was causing the load to go as high as 140 on a machine with 4 
> cores. What test is this, and how can I nice it? This does not happen on all 
> target nodes and I am running 4 NVTs at a time.
> 
> -- 
> Cheers,
> -Arya
> 
> _______________________________________________
> Openvas-discuss mailing list
> [email protected]
> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
> 
> 
> 
> -- 
> http://volatile-minds.blogspot.com -- blog
> http://www.volatileminds.net -- website
> 
> 
> 
> -- 
> Cheers,
> -Arya
> _______________________________________________
> Openvas-discuss mailing list
> [email protected]
> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

_______________________________________________
Openvas-discuss mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Reply via email to