Hello,

I've a strange behavior with 2 versions of Openvas 9.

The first node :
_ ubuntu 14.04
_ nmap 6.40
_ Openvas9
-> libopenvas9 = 8.1~beta2-1
-> openvas9-cli = 1.4.3-1
-> openvas9-gsa = 6.1~beta2-1
-> openvas9-manager = 6.1~beta2-1
-> openvas9-scanner = 5.1~beta2-1

The new node :
_ ubuntu 16.04
_ nmap 7.01
_ Openvas9
-> libopenvas9 = 9.0.1-1xenial
-> openvas9-cli = 1.4.5-1xenial
-> openvas9-gsa = 7.0.2-1xenial
-> openvas9-manager = 7.0.1-2xenial
-> openvas9-scanner = 5.1.1-1xenial

When I scan the same host (with the same scan config "Full and very deep 
ultimate") from 2 Openvas nodes, the results are very differents.

On the first node, Openvas 9 gives :
_ high : 2
_ medium : 12
_ low : 2
_ log : 52

On the new node :
_ high : 0
_ medium : 0
_ low : 0
_ log : 2

If I run nmap on both node with the same parameters, results are identics :
On the first node :
nmap -sS -O -p T:1-65535,U:1-65535 10.0.0.1
Starting Nmap 6.40 ( http://nmap.org ) at 2017-04-07 09:51 CEST
Nmap scan report for 10.0.0.1
Host is up (0.0011s latency).
Not shown: 65517 closed ports
PORT STATE SERVICE
80/tcp open http
135/tcp open msrpc
139/tcp open netbios-ssn
443/tcp open https
445/tcp open microsoft-ds
517/tcp filtered unknown
518/tcp filtered ntalk
1433/tcp open ms-sql-s
3389/tcp open ms-wbt-server
5985/tcp open wsman
47001/tcp open unknown
49152/tcp open unknown
49153/tcp open unknown
49154/tcp open unknown
49155/tcp open unknown
49158/tcp open unknown
49159/tcp open unknown
49160/tcp open unknown

On the new node :
nmap -sS -O -p T:1-65535,U:1-65535 10.0.0.1
Starting Nmap 7.01 ( https://nmap.org ) at 2017-04-07 09:12 CEST
Nmap scan report for 10.0.0.1
Host is up (0.00092s latency).
Not shown: 65517 closed ports
PORT STATE SERVICE
80/tcp open http
135/tcp open msrpc
139/tcp open netbios-ssn
443/tcp open https
445/tcp open microsoft-ds
517/tcp filtered unknown
518/tcp filtered ntalk
1433/tcp open ms-sql-s
3389/tcp open ms-wbt-server
5985/tcp open wsman
47001/tcp open unknown
49152/tcp open unknown
49153/tcp open unknown
49154/tcp open unknown
49155/tcp open unknown
49158/tcp open unknown
49159/tcp open unknown
49160/tcp open unknown

NMAP doesn't seems to be the problem.

How can I debug and correct Openvas9 on my second node ?

Thanks for your help !

Morgan
_______________________________________________
Openvas-discuss mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Reply via email to