Hi, On 11/06/2016 07:59 AM, kalin m wrote: > openvas-check-setup 2.3.2
please always use the latest available version of that openvas-check-setup. The current version 2.3.3 is available here: https://svn.wald.intevation.org/svn/openvas/trunk/tools/openvas-check-setup > is not "fully supported". / do i really need to downgrade nmap? In this case it is just a short info if you want to use the Nmap NSE scripts during scans. Running nmap 6.4.7 or even 7.0.x for normal scans is absolutely fine and supported. > i got openvas-8, not 7 installed... Which is absolutely fine. OpenVAS7 is end of life since a few months and you shouldn't and can't use it anymore. Btw. the correct install instructions for recent OpenVAS versions are available directly here: http://www.openvas.org/install-source.html which is linked on www.openvas.org -> Try out OpenVAS -> Install from Source > i did check the link about the icmp packets. with the previous version i had - i believe it was 6 - that was never a problem. Things can change, see: -------------------------------------------------------------------- The default setting for the Alive-Test changes from ICMP&TCP&ARP to just ICMP. Hence it can happen that results change for some of your Tasks because some systems are not regarded as alive anymore. But in most cases where larger IP ranges are scanned the scan duration will significantly drop down while getting the same results. However, you do not need to change a Scan Configuration or Task to get back to the previous state, you just need to adjust the Alive-Test method for the respective Target. ---------------------------------------------------------------------- --> http://www.openvas.org/news_archive.html > the scanner log says "The remote host is dead". it's not. not sure if > this has to do with the icmp. ping is disabled. using plain nmap i get > port scan results. and this is exactly your issue here and can be solved by the hint posted previously: - If your system is not answering to ICMP requests the "Alive Test" option of your Target configuration might be another pitfall: http://docs.greenbone.net/GSM-Manual/gos-3.1/en/scanning.html#creating-a-target Either configure your system to answer to ICMP requests or configure the "Alive Test" options accordingly. Regards, -- Christian Fischer | Greenbone Networks GmbH | http://greenbone.net Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner _______________________________________________ Openvas-discuss mailing list [email protected] https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
