* Michael Meyer <[email protected]>:
> *** Ralf Hildebrandt wrote:
> 
> > And the number of NVTs is 46542. So why is it "too low"?
> 
> You didn't run "openvasmd --rebuild"?
> 
> 1. Kill all running openvas services.
> 2. Delete /var/lib/openvas/plugins/*
> 3. Delete /var/cache/openvas/*

OK.

> 4. run "openvas-nvt-sync"

Worked without error

> 5. Start the scanner

Done

> 6. Wait until scanner has loaded all NVTs (ps aux | grep openvassd).

That took about a minute.
root     32610 91.4  0.0 163740 32208 ?        Ss   13:19   1:19 openvassd: 
Reloaded all the NVTs.

> 7. Run "openvasmd --rebuild"

# ps auxwww|grep openvas |fgrep -v grep
root       305  0.0  0.0 184576  7556 pts/0    S+   13:24   0:00 openvasmd: 
Reloading
root       306  0.0  0.0 187260 15836 pts/0    S+   13:24   0:00 openvasmd: 
Rebuilding
root     32756 44.6  0.0 163740 32256 ?        Ss   13:23   1:15 openvassd: 
Reloaded all the NVTs.

Stracing the rebuild process:

# strace -p 306
strace: Process 306 attached
recvfrom(7, ^Cstrace: Process 306 detached <detached ...>
 
FD7 is:

# lsof -p 306 -ad 7
COMMAND   PID USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
openvasmd 306 root    7u  IPv4 200216      0t0  TCP 
localhost.localdomain:57728->localhost.localdomain:9391 (ESTABLISHED)

# lsof|grep 9391
openvassd 32756             root    5u     IPv4             198407 0t0        
TCP *:9391 (LISTEN)

And what's it doing?

# strace -p 32756
strace: Process 32756 attached
restart_syscall(<... resuming interrupted nanosleep ...>) = 0
write(6, "*4\r\n$6\r\nHSETNX\r\n$23\r\nOpenVAS.__G"..., 60) = 60
read(6, ":0\r\n", 16384)                = 4
write(6, "*4\r\n$6\r\nHSETNX\r\n$23\r\nOpenVAS.__G"..., 60) = 60
read(6, ":0\r\n", 16384)                = 4
write(6, "*4\r\n$6\r\nHSETNX\r\n$23\r\nOpenVAS.__G"..., 60) = 60
read(6, ":0\r\n", 16384)                = 4
write(6, "*4\r\n$6\r\nHSETNX\r\n$23\r\nOpenVAS.__G"..., 60) = 60
read(6, ":0\r\n", 16384)                = 4
write(6, "*4\r\n$6\r\nHSETNX\r\n$23\r\nOpenVAS.__G"..., 60) = 60
read(6, ":0\r\n", 16384)                = 4
write(6, "*4\r\n$6\r\nHSETNX\r\n$23\r\nOpenVAS.__G"..., 60) = 60
read(6, ":0\r\n", 16384)                = 4
write(6, "*4\r\n$6\r\nHSETNX\r\n$23\r\nOpenVAS.__G"..., 60) = 60
read(6, ":0\r\n", 16384)                = 4
write(6, "*4\r\n$6\r\nHSETNX\r\n$23\r\nOpenVAS.__G"..., 60) = 60
read(6, ":0\r\n", 16384)                = 4
write(6, "*4\r\n$6\r\nHSETNX\r\n$23\r\nOpenVAS.__G"..., 60) = 60
read(6, ":0\r\n", 16384)                = 4
write(6, "*4\r\n$6\r\nHSETNX\r\n$23\r\nOpenVAS.__G"..., 61) = 61
read(6, ":0\r\n", 16384)                = 4
write(6, "*4\r\n$6\r\nHSETNX\r\n$23\r\nOpenVAS.__G"..., 61) = 61
read(6, ":0\r\n", 16384)                = 4
write(6, "*4\r\n$6\r\nHSETNX\r\n$23\r\nOpenVAS.__G"..., 61) = 61
read(6, ":0\r\n", 16384)                = 4
write(6, "*4\r\n$6\r\nHSETNX\r\n$23\r\nOpenVAS.__G"..., 61) = 61
read(6, ":0\r\n", 16384)                = 4
write(6, "*4\r\n$6\r\nHSETNX\r\n$23\r\nOpenVAS.__G"..., 61) = 61
read(6, ":0\r\n", 16384)                = 4
write(6, "*4\r\n$6\r\nHSETNX\r\n$23\r\nOpenVAS.__G"..., 61) = 61
read(6, ":0\r\n", 16384)                = 4
nanosleep({60, 0}, 

# lsof -p 32756 -ad 6
COMMAND     PID USER   FD   TYPE             DEVICE SIZE/OFF   NODE NAME
openvassd 32756 root    6u  unix 0xffff880806a07080      0t0 199354
type=STREAM

I think it's time to ramp up the logging as you suggested.


> 8. Start the Manager
> 9. Start GSA
> 
> If that doesn't help:
> 
> Edit /etc/openvas/openvasmd_log.conf. Change all "level" to 128.
> Restart the Manager. Run "openvasmd --rebuild -v" and look if you see
> anything interesting in /var/log/openvasmd.log.


-- 
Ralf Hildebrandt                   Charite Universitätsmedizin Berlin
[email protected]        Campus Benjamin Franklin
http://www.charite.de              Hindenburgdamm 30, 12203 Berlin
Geschäftsbereich IT, Abt. Netzwerk fon: +49-30-450.570.155
_______________________________________________
Openvas-discuss mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Reply via email to