> perhaps you are misled by the output of rsync?
> It checks for all the files to determine whether there is a difference or
> not. Furthermore, for example the older SCAP data are indeed updated now
> and then.
>
> Look at the rsync stats to verify you only download deltas.
Hmm, I upgraded yesterday and I upgraded now. Please take a look at the
output:
---------------- snip --------------------
By using this service you agree to our terms and conditions.
Only one sync per time, otherwise the source ip will be blocked.
receiving incremental file list
deleting scap.db-wal
deleting scap.db-shm
./
COPYING
1,493 100% 1.42MB/s 0:00:00 (xfr#1, to-chk=67/69)
COPYING.asc
181 100% 25.25kB/s 0:00:00 (xfr#2, to-chk=66/69)
nvdcve-2.0-2002.xml.asc
181 100% 22.09kB/s 0:00:00 (xfr#3, to-chk=64/69)
nvdcve-2.0-2003.xml.asc
181 100% 22.09kB/s 0:00:00 (xfr#4, to-chk=62/69)
nvdcve-2.0-2004.xml.asc
181 100% 12.63kB/s 0:00:00 (xfr#5, to-chk=60/69)
nvdcve-2.0-2005.xml.asc
181 100% 8.42kB/s 0:00:00 (xfr#6, to-chk=58/69)
nvdcve-2.0-2006.xml.asc
181 100% 6.80kB/s 0:00:00 (xfr#7, to-chk=56/69)
nvdcve-2.0-2007.xml.asc
181 100% 6.31kB/s 0:00:00 (xfr#8, to-chk=54/69)
nvdcve-2.0-2008.xml.asc
181 100% 4.42kB/s 0:00:00 (xfr#9, to-chk=52/69)
nvdcve-2.0-2009.xml.asc
181 100% 2.53kB/s 0:00:00 (xfr#10, to-chk=50/69)
nvdcve-2.0-2010.xml.asc
181 100% 2.30kB/s 0:00:00 (xfr#11, to-chk=48/69)
nvdcve-2.0-2011.xml.asc
181 100% 2.18kB/s 0:00:00 (xfr#12, to-chk=46/69)
nvdcve-2.0-2012.xml
44,176,763 100% 17.20MB/s 0:00:02 (xfr#13, to-chk=45/69)
nvdcve-2.0-2012.xml.asc
181 100% 0.20kB/s 0:00:00 (xfr#14, to-chk=44/69)
nvdcve-2.0-2013.xml.asc
181 100% 0.20kB/s 0:00:00 (xfr#15, to-chk=42/69)
nvdcve-2.0-2014.xml
42,102,343 100% 10.21MB/s 0:00:03 (xfr#16, to-chk=41/69)
nvdcve-2.0-2014.xml.asc
181 100% 9.82kB/s 0:00:00 (xfr#17, to-chk=40/69)
nvdcve-2.0-2015.xml
34,879,060 100% 10.25MB/s 0:00:03 (xfr#18, to-chk=39/69)
nvdcve-2.0-2015.xml.asc
181 100% 0.18kB/s 0:00:00 (xfr#19, to-chk=38/69)
nvdcve-2.0-2016.xml
39,205,010 100% 21.54MB/s 0:00:01 (xfr#20, to-chk=37/69)
nvdcve-2.0-2016.xml.asc
181 100% 0.17kB/s 0:00:01 (xfr#21, to-chk=36/69)
nvdcve-2.0-2017.xml
22,462,091 100% 14.74MB/s 0:00:01 (xfr#22, to-chk=35/69)
nvdcve-2.0-2017.xml.asc
181 100% 0.13kB/s 0:00:01 (xfr#23, to-chk=34/69)
official-cpe-dictionary_v2.2.xml
38,837,565 100% 5.16MB/s 0:00:07 (xfr#24, to-chk=33/69)
official-cpe-dictionary_v2.2.xml.asc
181 100% 0.16kB/s 0:00:01 (xfr#25, to-chk=32/69)
sha1sums
3,932 100% 3.52kB/s 0:00:01 (xfr#26, to-chk=31/69)
timestamp
13 100% 0.01kB/s 0:00:01 (xfr#27, to-chk=28/69)
timestamp.asc
181 100% 0.16kB/s 0:00:01 (xfr#28, to-chk=27/69)
oval/5.10/org.mitre.oval/c/
oval/5.10/org.mitre.oval/c/oval.xml.asc
181 100% 0.16kB/s 0:00:01 (xfr#29, to-chk=17/69)
oval/5.10/org.mitre.oval/i/
oval/5.10/org.mitre.oval/i/oval.xml.asc
181 100% 0.16kB/s 0:00:01 (xfr#30, to-chk=15/69)
oval/5.10/org.mitre.oval/m/
oval/5.10/org.mitre.oval/m/oval.xml.asc
181 100% 0.15kB/s 0:00:01 (xfr#31, to-chk=13/69)
oval/5.10/org.mitre.oval/p/
oval/5.10/org.mitre.oval/p/oval.xml.asc
181 100% 0.15kB/s 0:00:01 (xfr#32, to-chk=11/69)
oval/5.10/org.mitre.oval/v/family/
oval/5.10/org.mitre.oval/v/family/ios.xml.asc
181 100% 0.15kB/s 0:00:01 (xfr#33, to-chk=8/69)
oval/5.10/org.mitre.oval/v/family/macos.xml.asc
181 100% 0.15kB/s 0:00:01 (xfr#34, to-chk=6/69)
oval/5.10/org.mitre.oval/v/family/pixos.xml.asc
181 100% 0.15kB/s 0:00:01 (xfr#35, to-chk=4/69)
oval/5.10/org.mitre.oval/v/family/unix.xml.asc
181 100% 0.15kB/s 0:00:01 (xfr#36, to-chk=2/69)
oval/5.10/org.mitre.oval/v/family/windows.xml.asc
181 100% 0.15kB/s 0:00:01 (xfr#37, to-chk=0/69)
sent 250,357 bytes received 3,539,994 bytes 120,328.60 bytes/sec
total size is 787,873,062 speedup is 207.86
part 0 Done
part 1 Done
....
....
--------------------------------- snap ----------------------------
As you can see, cve and scap are updated, but also very old are updated, too.
As I updated only one day before, I would not expect so much changes.
The only thing, I can imagine, is that scap and cve are daily created somehow,
which might change the fingerprints.
I thought it worth, to point to this problem, although it is not destructive.
Thanks for your help. If you want you can answer me also in German, as I am
German and of course also directly, if you prefer.
Best regards
Hans-J. Ullrich
_______________________________________________
Openvas-discuss mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
