Re: [Openvas-discuss] OpenVAS 7 Fresh Install 0 results
On Freitag, 4. Juli 2014, Ricardo Iramar dos Santos wrote: I did a fresh install of OpenVAS from source following INSTALL files in a Ubuntu 12.04.4 LTS (AWS server). Everything looks fine when I ran openvas-check-setup (below I'll paste the output). Just to test the installation I created the task below but I aways get 0 results. Please check the Errors section in the results view. Also try out to set the Alive Test to Consider Alive for this scan of a single host. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] OVAL scan Problems
Hey, i tested the oval scan config from greenbones website. But the NVT „Show System Characteristics“ gathered no informations. The ssh login was possible… Is it still necessary to install ovaldi on the scanned system? Then i downloaded the report format for OVAL System Characteristics from the greenbone website. After importing, verifying and enabling the report format, i wanted to download the report with the new format. But i can’t find the format in the drop down menu. In alerts i can find it in the include report drop down, but the alert doesn’t work… Any ideas? Thanks, Rene ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] Server System Requirements
Hey, i haven´t found any system requirements for openvas, it would be helpful if there were some on the website. The only thing i got was on greenbones website, the Security Manager ONE appliance. Requirements: 2 CPUs, 2GB Ram and 10GB HD Is that enough for about 30 scans a day (up to 10 parallel)? How much could you scan with that hardware? Thanks, Rene ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] openvas 7 on rhel 7
Hi List, Is there nice way to install openvas 7 on rhel 7? tried using atomic repos, but with no success? Error: Unable to determine distribution type. Please send the contents of /etc/redhat-release to supp...@atomicrocketturtle.com Eero ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Server System Requirements
2014-07-07 11:50 GMT+03:00 Rene Behring rene.behr...@gmail.com: Hey, i haven´t found any system requirements for openvas, it would be helpful if there were some on the website. The only thing i got was on greenbones website, the Security Manager ONE appliance. Requirements: 2 CPUs, 2GB Ram and 10GB HD Is that enough for about 30 scans a day (up to 10 parallel)? How much could you scan with that hardware? Well, you might be able to scan one single host on that hardware. Try something like this: Quadcore processor and 20 to 64 GB of memory -- Eero ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Server System Requirements
2014-07-07 14:05 GMT+03:00 Rene Behring rene.behr...@gmail.com: What? Well thats more than i thought… By the Way, i am talking about OpenVAS 6 on a RHEL 6 VM. What hardware has your RHEL 7 server and where does your knowledge come from? Thanks for your fast response ;) Well, we are currently running two physical scanner servers and one very large amazon instance for our PCI scanners .. Usually servers are running quad core processor and 32GB to 128GB of physical memory. So, it's based on my experiences on real production environments. Our environment is using RHEL 6 and Centos 6 as atomic repository supports it very well .. -- Eero ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Server System Requirements
I'm happily scanning hundreds of IPs using a 2GHz 256MByte Arch Linux Virtual Private Server. Depends on your requirements. Do you need to run a lot of scans in parallel, or can a scan run lazily all night? Do you want to brute force / enumerate logins, or do you just run discovery scans. Etc etc... Cheers, Johannes 2014-07-07 13:05 GMT+02:00 Rene Behring rene.behr...@gmail.com: What? Well thats more than i thought… By the Way, i am talking about OpenVAS 6 on a RHEL 6 VM. What hardware has your RHEL 7 server and where does your knowledge come from? Thanks for your fast response ;) Rene Am 07.07.2014 um 11:44 schrieb Eero Volotinen eero.voloti...@iki.fi: 2014-07-07 11:50 GMT+03:00 Rene Behring rene.behr...@gmail.com: Hey, i haven´t found any system requirements for openvas, it would be helpful if there were some on the website. The only thing i got was on greenbones website, the Security Manager ONE appliance. Requirements: 2 CPUs, 2GB Ram and 10GB HD Is that enough for about 30 scans a day (up to 10 parallel)? How much could you scan with that hardware? Well, you might be able to scan one single host on that hardware. Try something like this: Quadcore processor and 20 to 64 GB of memory -- Eero ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Server System Requirements
Am 07.07.2014 13:26, schrieb Eero Volotinen: Well, we are currently running two physical scanner servers and one very large amazon instance for our PCI scanners .. Usually servers are running quad core processor and 32GB to 128GB of physical memory. So, it's based on my experiences on real production environments. no it's not experience would be we tried it with less RAM but we had to upgrade to 32 GB because it otherwise did not work and not you need that much RAM because i have the most RAM is needed for the feed-sync and with 3 GB you are normally fine signature.asc Description: OpenPGP digital signature ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Server System Requirements
As far as i am testing OpenVAS i didn’t need more then 2GB. But a few day ago linux killed openvas because it eats to much memory... I think i will take a quadcore with 4gb ram. Am 07.07.2014 um 13:31 schrieb Reindl Harald h.rei...@thelounge.net: Am 07.07.2014 13:26, schrieb Eero Volotinen: Well, we are currently running two physical scanner servers and one very large amazon instance for our PCI scanners .. Usually servers are running quad core processor and 32GB to 128GB of physical memory. So, it's based on my experiences on real production environments. no it's not experience would be we tried it with less RAM but we had to upgrade to 32 GB because it otherwise did not work and not you need that much RAM because i have the most RAM is needed for the feed-sync and with 3 GB you are normally fine Yes you are right, most of the time it will be a default scan config. It´s okay if its not parallel, but it should not run just one scan a night. Do you need to run a lot of scans in parallel, or can a scan run lazily all night? Do you want to brute force / enumerate logins, or do you just run discovery scans. Etc etc… Thanks for your fast responses, Rene ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Server System Requirements
A lot of this really depends on which and how many plugins you use as well as the size of your target object. You'll potentially see a lot of forked processes. FWIW, I have a 4CPU 16GB RAM VM to scan /23 size networks (approx 500 hosts) with virtually all plugins enabled and configured. -G As far as i am testing OpenVAS i didnt need more then 2GB. But a few day ago linux killed openvas because it eats to much memory... I think i will take a quadcore with 4gb ram. Am 07.07.2014 um 13:31 schrieb Reindl Harald h.rei...@thelounge.net: Am 07.07.2014 13:26, schrieb Eero Volotinen: Well, we are currently running two physical scanner servers and one very large amazon instance for our PCI scanners .. Usually servers are running quad core processor and 32GB to 128GB of physical memory. So, it's based on my experiences on real production environments. no it's not experience would be we tried it with less RAM but we had to upgrade to 32 GB because it otherwise did not work and not you need that much RAM because i have the most RAM is needed for the feed-sync and with 3 GB you are normally fine Yes you are right, most of the time it will be a default scan config. It´s okay if its not parallel, but it should not run just one scan a night. Do you need to run a lot of scans in parallel, or can a scan run lazily all night? Do you want to brute force / enumerate logins, or do you just run discovery scans. Etc etc Thanks for your fast responses, Rene ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss -- Geoff Galitz http://www.galitz.org ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS 7 Fresh Install 0 results
Hi Jan, I checked and there is no erros. And change the Target to Consider Alive now I got a lot results. :D Thanks a lot for your support. Ricardo Iramar On Mon, Jul 7, 2014 at 3:40 AM, Jan-Oliver Wagner jan-oliver.wag...@greenbone.net wrote: On Freitag, 4. Juli 2014, Ricardo Iramar dos Santos wrote: I did a fresh install of OpenVAS from source following INSTALL files in a Ubuntu 12.04.4 LTS (AWS server). Everything looks fine when I ran openvas-check-setup (below I'll paste the output). Just to test the installation I created the task below but I aways get 0 results. Please check the Errors section in the results view. Also try out to set the Alive Test to Consider Alive for this scan of a single host. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] openvas 7 on rhel 7
I just installed from the source following this http://www.openvas.org/install-source.html and I had no problem. TIP: Install all the deps (including packages -dev) into your system first. On Mon, Jul 7, 2014 at 6:21 AM, Eero Volotinen eero.voloti...@iki.fi wrote: Hi List, Is there nice way to install openvas 7 on rhel 7? tried using atomic repos, but with no success? Error: Unable to determine distribution type. Please send the contents of /etc/redhat-release to supp...@atomicrocketturtle.com Eero ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] openvas 7 on rhel 7
2014-07-07 21:48 GMT+03:00 Ricardo Iramar dos Santos rira...@gmail.com: I just installed from the source following this http://www.openvas.org/install-source.html and I had no problem. TIP: Install all the deps (including packages -dev) into your system first. Thanks for the tip, but I really want to install from rpm packages .. -- Eero ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Server System Requirements
Something to consider: The number of nasl processes running (if we remove basic control tasks from the picture) is the number of hosts being scanned at a time multipled by the number of scripts being executed by the host. How you configure the two numbers above will result in drastically different memory footprint requirements: E.g. Let's say that we can support 100 simultaneous NASl scripts on the hardware in question (CPU mainly). If we say we can run 2 hosts, 50 scripts simultaneously each, a) Memory usage on the scanner is low; b) Dependencies on scripts may limit effective parallel processing; c) You're throwing a lot of traffic at a given IP, and may not get ideal response if the scanned server gets too loaded; If, we go the opposite route, and scan 50 hosts, 2 nasl scripts at a time max, again,at most 100 simultaneous scripts, then a) Memory usage on the scanner sky rockets b) Very high effective use of parallel processing c) Long scan times per IP, because despite effective parallel processing, it takes long to get through all scripts for a given IP. d) Low bandwidth being thrown at a given target at any time. So, how you configure your scanning environment is highly dependent on what you need to accomplish. I would suggest playing around with the settings mentioned, taking it to a couple of extremes to see where you can take things. For reference, we've still got some scanners working with only 1 Gig of RAM (NOT something I would recommend doing if you are setting up a new install!). Hope that helps, Thomas On 07/07/14 08:24 AM, Geoff Galitz wrote: A lot of this really depends on which and how many plugins you use as well as the size of your target object. You'll potentially see a lot of forked processes. FWIW, I have a 4CPU 16GB RAM VM to scan /23 size networks (approx 500 hosts) with virtually all plugins enabled and configured. -G As far as i am testing OpenVAS i didn’t need more then 2GB. But a few day ago linux killed openvas because it eats to much memory... I think i will take a quadcore with 4gb ram. Am 07.07.2014 um 13:31 schrieb Reindl Harald h.rei...@thelounge.net: Am 07.07.2014 13:26, schrieb Eero Volotinen: Well, we are currently running two physical scanner servers and one very large amazon instance for our PCI scanners .. Usually servers are running quad core processor and 32GB to 128GB of physical memory. So, it's based on my experiences on real production environments. no it's not experience would be we tried it with less RAM but we had to upgrade to 32 GB because it otherwise did not work and not you need that much RAM because i have the most RAM is needed for the feed-sync and with 3 GB you are normally fine Yes you are right, most of the time it will be a default scan config. It´s okay if its not parallel, but it should not run just one scan a night. Do you need to run a lot of scans in parallel, or can a scan run lazily all night? Do you want to brute force / enumerate logins, or do you just run discovery scans. Etc etc… Thanks for your fast responses, Rene ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss -- Geoff Galitz http://www.galitz.org ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
