[Openvas-discuss] Knowledge base isn't being saved after a scan
I'm scanning a very fragile host, and I need to be able to figure out which plugins out of a couple thousand are causing the host to crash, so I've written a script that creates a config with a single plugin selected, creates the task, and runs the scan, then checks the results and runs a simple test to make sure the host is still alive before continuing with the next plugin. If it detects that the host has died, then my script restarts the host to continue scanning, logging which plugin caused the host to crash. However, for a script like this to work well, I need to be able to have the knowledge base created after each test to be saved and then loaded by the next test, but it isn't working. Despite that the configs are set to save/restore the KB, and the max age is set to 24 hours, the KB simply isn't being saved or loaded. I tested this by creating a plugin that simply dumps the contents of the KB. When I create a config with a port scan and my KB dumping plugin, then I see the port scan results in the KB. If I immediately run another task with just the KB dump, I don't see the port scan results. I would expect that the first task would have saved the port scan results to the KB and the second task would read that saved KB and dump it. I'm running CentOS 6, OpenVas Manager 5.0.5, Scanner 4.0.5, and GSAD 5.0.4. The strange thing is that on another system, I'm running an older version of OpenVAS (Scanner 3.3.1, Manager 3.0.6, Admin 1.2.1, GSAD 3.0.3) and it works fine, but I can't scan my fragile host from that system due to the network setup. On that system, I can see the KBs being saved in /var/lib/openvas/users/om/kbs, but on my system running the newer OpenVas, the files there aren't being created. Is there perhaps something I'm missing? ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Knowledge base isn't being saved after a scan
The strange thing is that on another system, I'm running an older version of OpenVAS (Scanner 3.3.1, Manager 3.0.6, Admin 1.2.1, GSAD 3.0.3) and it works fine, but I can't scan my fragile host from that system due to the network setup. On that system, I can see the KBs being saved in /var/lib/openvas/users/om/kbs, but on my system running the newer OpenVas, the files there aren't being created. Is there perhaps something I'm missing? I think that KB saving has basically been removed from Scanner. I see some stuff is saved to var/lib/openvas/kbs, but I don't think it's what you're looking for. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Knowledge base isn't being saved after a scan
Hmm...If that's the case, then that's a pretty significant change that should have been put into the update notes when it was released. Also, if KB saving has been removed, then the save_kb option should be removed too, as setting it to yes won't do anything. I don't have a /var/lib/openvas/kbs. In /var/lib/openvas, the only directories I have care CA, cert-data, gnupg, mgr, plugins, private, and scap-data. I tried making a kbs directory and running a scan, but still no saved KB. -Original Message- From: matthew.mund...@greenbone.net [mailto:matthew.mund...@greenbone.net] Sent: Tuesday, December 02, 2014 1:04 PM To: Wiza, David Cc: openvas-discuss@wald.intevation.org Subject: Re: [Openvas-discuss] Knowledge base isn't being saved after a scan The strange thing is that on another system, I'm running an older version of OpenVAS (Scanner 3.3.1, Manager 3.0.6, Admin 1.2.1, GSAD 3.0.3) and it works fine, but I can't scan my fragile host from that system due to the network setup. On that system, I can see the KBs being saved in /var/lib/openvas/users/om/kbs, but on my system running the newer OpenVas, the files there aren't being created. Is there perhaps something I'm missing? I think that KB saving has basically been removed from Scanner. I see some stuff is saved to var/lib/openvas/kbs, but I don't think it's what you're looking for. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] OpenVAS integration with CMDB systems
Has anyone performed an integration with OpenVAS as a data source for any sort CMDB-type system? I'm collecting quite a bit of an inventory and information about the network within OpenVAS, and it would be great to push that information into some sort of inventory system where I could also add owner, config info, etc. Any experiences and thoughts are appreciated. K ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Knowledge base isn't being saved after a scan
Hmm...If that's the case, then that's a pretty significant change that should have been put into the update notes when it was released. Also, if KB saving has been removed, then the save_kb option should be removed too, as setting it to yes won't do anything. From openvas-scanner/CHANGES: openvas-scanner 4.0.0 (2014-04-10) ... * Support for Knowledge Base saving outside of network scans has been removed. ... So you should still have it. The preference is save_knowledge_base, by the way. Maybe try OpenVAS-7 anyway? -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
