Re: [Openvas-discuss] Unable to Sync

[system cambium]

Christian/Eero,

Thank You. It worked.

On 20 February 2017 at 18:44, Eero Volotinen  wrote:

> sounds like client is using opendns for filtering?
>
> is it forced or manually configured? try replacing with google dns 8.8.8.8
> and try again.
> You still need to install md5sums package to get feed working..
>
> --
> Eero
>
> 2017-02-20 15:11 GMT+02:00 Christian Fischer  net>:
>
>> Hi,
>>
>> On 20.02.2017 14:07, Eero Volotinen wrote:
>> > install bzip2 and md5sum tools from package management and try again.
>>
>> in this case this won't help here.
>>
>> Please contact your network administrator about this issue. From the
>> output and the redirect to malware.opendns.com we can see that there is
>> some proxy in between causing the shown issue.
>>
>> Regards,
>>
>> --
>>
>> Christian Fischer | PGP Key: 0x54F3CE5B76C597AD
>> Greenbone Networks GmbH | http://greenbone.net
>> Neumarkt 12, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460
>> Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
>> ___
>> Openvas-discuss mailing list
>> Openvas-discuss@wald.intevation.org
>> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/o
>> penvas-discuss
>>
>
>
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] Unable to Sync

[Reindl Harald]

Am 20.02.2017 um 20:43 schrieb Eero Volotinen:

It's a bit hard to see that modifying dns entry as bypassing any
protections.


you don't know the environment
i don't know the environment

you replied to a answer which alread contained "Please contact your 
network administrator about this issue" and *that* is the way he has to go



I already assume that this person has permission to run openvas on


but that don#t imply that he has the permissions to do anything he wants 
*without* coordinate it with the network admin staff and typically that 
includes override company wide DNS settings



2017-02-20 15:19 GMT+02:00 Reindl Harald >:



Am 20.02.2017 um 14:14 schrieb Eero Volotinen:

sounds like client is using opendns for filtering?

is it forced or manually configured? try replacing with google dns
8.8.8.8 and try again.


NO - when you work in a company you are *not* supposed to bypass
your network admins and if you do so instead cooridnate with your
network staff you may get fired from your job

please stop confusing your private setups or your companies one
where you probably make the rules (as i do in ours) with other
emvironments

You still need to install md5sums package to get feed working..

2017-02-20 15:11 GMT+02:00 Christian Fischer

>>:

Hi,

On 20.02.2017 14:07, Eero Volotinen wrote:
> install bzip2 and md5sum tools from package management and
try again.

in this case this won't help here.

Please contact your network administrator about this issue.
From the
output and the redirect to malware.opendns.com

 we can see that there is
some proxy in between causing the shown issue.

___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] Unable to Sync

[Eero Volotinen]

It's a bit hard to see that modifying dns entry as bypassing any
protections.

I already assume that this person has permission to run openvas on company
network.

Eero

2017-02-20 15:19 GMT+02:00 Reindl Harald :

>
>
> Am 20.02.2017 um 14:14 schrieb Eero Volotinen:
>
>> sounds like client is using opendns for filtering?
>>
>> is it forced or manually configured? try replacing with google dns
>> 8.8.8.8 and try again.
>>
>
> NO - when you work in a company you are *not* supposed to bypass your
> network admins and if you do so instead cooridnate with your network staff
> you may get fired from your job
>
> please stop confusing your private setups or your companies one where you
> probably make the rules (as i do in ours) with other emvironments
>
> You still need to install md5sums package to get feed working..
>>
>> 2017-02-20 15:11 GMT+02:00 Christian Fischer
>> > >>:
>>
>> Hi,
>>
>> On 20.02.2017 14:07, Eero Volotinen wrote:
>> > install bzip2 and md5sum tools from package management and try
>> again.
>>
>> in this case this won't help here.
>>
>> Please contact your network administrator about this issue. From the
>> output and the redirect to malware.opendns.com
>>  we can see that there is
>> some proxy in between causing the shown issue.
>>
>> Regards,
>>
> ___
> Openvas-discuss mailing list
> Openvas-discuss@wald.intevation.org
> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
>
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] Strange error extracting reports

[Ebert, Christian]

Hi,

the hosts has 64 GB RAM.

Best regards

Christian Ebert
Chief Security Analyst, CISM, T.I.S.P.
Head of Penetration Testing

QSC AG
Mathias-Brüggen-Straße 55
50829 Köln

T+49 221 669-8950
F+49 221 669-85950
M+49 163 6698950
christian.eb...@qsc.de
http://www.qsc.de 

Besuchen Sie unsere Blogs:
Corporate Blog unter http://blog.qsc.de 
Themen-Blog zur Digitalisierung unter http://digitales-wirtschaftswunder.de


Bitte finden Sie hier die handelsrechtlichen Pflichtangaben:
http://www.qsc.de/pflichtangaben


Am 20.02.2017 um 15:26 schrieb Reindl Harald :



> Am 20.02.2017 um 15:18 schrieb Ebert, Christian:
> But with huge reports (the xml file is about 13 Mbytes) xmlstarlet crashes:
> -:2.10003842: xmlSAX2Characters: huge text node: out of memory

surely, forgt openvas with less then 3 GB RAM right from the start
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss


smime.p7s
Description: S/MIME cryptographic signature
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] Strange error extracting reports

[Reindl Harald]

Am 20.02.2017 um 15:18 schrieb Ebert, Christian:

But with huge reports (the xml file is about 13 Mbytes) xmlstarlet crashes:
-:2.10003842: xmlSAX2Characters: huge text node: out of memory


surely, forgt openvas with less then 3 GB RAM right from the start
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

[Openvas-discuss] Strange error extracting reports

[Ebert, Christian]

Hi,

 

Using OpenVAS 8 under Debian 8/9, all patches applied.

 

I try to export some reports using the built-in report format “CSV Results”

 

 omp --username=$USERNAME --password=$PASSWORD -iX "" >test.xml

 

Now I extract the report for further base64-decoding using:

 

xmlstarlet sel -t -v get_reports_response/report/text\(\) test1.xml

 

Normally it works.

 

But with huge reports (the xml file is about 13 Mbytes) xmlstarlet crashes:

 

-:2.10003842: xmlSAX2Characters: huge text node: out of memory

 

J1bm5pbmcgYXQgdGhpcyBwb3J0LgoKIFdpbmRvd3MgUmVtb3RlIE1hbmFnZW1lbnQgKFdpblJNKS
Bpcy

 
^

-:2.10003842: Extra content at the end of the document

J1bm5pbmcgYXQgdGhpcyBwb3J0LgoKIFdpbmRvd3MgUmVtb3RlIE1hbmFnZW1lbnQgKFdpblJNKS
Bpcy

 

Any ideas how to fix this?

 

I found a workaround:

Export the raw xml report, extract the xml subtree und run xsltproc using
the xslt-script of the report format “CSV Results”.

 

But this is still a workaround. It would be better, if OpenVAS could deliver
the report in a form, one can extract without a crash :-/

 

Best regards

 

Christian Ebert

Chief Security Analyst, CISM, T.I.S.P.

Head of Penetration Testing

 

QSC AG

Mathias-Brüggen-Straße 55

50829 Köln

 

T   +49 221 669-8950

F   +49 221 669-85950

M   +49 163 6698950

christian.eb...@qsc.de

http://  www.qsc.de 

 

Besuchen Sie auch unser Blog unter   http://blog.qsc.de


Bitte finden Sie hier die handelsrechtlichen Pflichtangaben:

  http://www.qsc.de/pflichtangaben

 



smime.p7s
Description: S/MIME cryptographic signature
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] Unable to Sync

[system cambium]

Hello Eero,

Thank you for your prompt response.

I have both the packages installed on my Laptop. Below is the output of
their presence:

sit-india@sitindia-Latitude-E5440:~$ which md5sum
/usr/bin/md5sum

sit-india@sitindia-Latitude-E5440:~$ which bzip2
/bin/bzip

sit-india@sitindia-Latitude-E5440:~$ echo $PATH
/home/sit-india/bin:/home/sit-india/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:
*/usr/bin*:/sbin:*/bin*:/usr/games:/usr/local/games:/snap/bin

Regards,
Shashank Tadakamadla


On 20 February 2017 at 18:37, Eero Volotinen  wrote:

> install bzip2 and md5sum tools from package management and try again.
>
> Eero
>
> 2017-02-20 14:50 GMT+02:00 system cambium :
>
>> Team,
>>
>> I have been trying to update library of openvas using "openvas-nvt-sync",
>> but unfortunately, it fails to update.
>>
>> Tried multiple methods to install it based on solutions poped-up in
>> google search. Still had no success.
>>
>> Below are the logs:
>>
>> sit-india@sitindia-Latitude-E5440:~$ sudo openvas-nvt-sync
>> [sudo] password for sit-india:
>> [i] This script synchronizes an NVT collection with the 'OpenVAS NVT
>> Feed'.
>> [i] The 'OpenVAS NVT Feed' is provided by 'The OpenVAS Project'.
>> [i] Online information about this feed: 'http://www.openvas.org/openva
>> s-nvt-feed.html'.
>> [i] NVT dir: /var/lib/openvas/plugins
>> [w] Could not determine feed version.
>> [i] rsync is not recommended for the initial sync. Falling back on http.
>> [i] Will use wget
>> [i] Using GNU wget: /usr/bin/wget
>> [i] Configured NVT http feed: http://www.openvas.org/openvas
>> -nvt-feed-current.tar.bz2
>> [i] Downloading to: /tmp/openvas-nvt-sync.GeOdasxi
>> Tx/openvas-feed-2017-02-20-2734.tar.bz2
>> --2017-02-20 18:19:52--  http://www.openvas.org/openvas
>> -nvt-feed-current.tar.bz2
>> Resolving www.openvas.org (www.openvas.org)... 208.69.34.25,
>> :::208.69.34.26
>> Connecting to www.openvas.org (www.openvas.org)|208.69.34.25|:80...
>> connected.
>> HTTP request sent, awaiting response... 302 Moved Temporarily
>> Location: http://88c6df1b749319ddd6a2c4c99580bf4b82dc.d0452297.id.
>> opendns.com/h/www.openvas.org/openvas-nvt-feed-current.tar.
>> bz2?X-OpenDNS-Session=aa51dc5c0ccc5aad4_608281d70f7e0048fe08
>> ad20d64c90e9397c_88c6df1b749319ddd6a2c4c99580bf4b82dc30d2_ [following]
>> --2017-02-20 18:19:52--  http://88c6df1b749319ddd6a2c4c
>> 99580bf4b82dc.d0452297.id.opendns.com/h/www.openvas.org/
>> openvas-nvt-feed-current.tar.bz2?X-OpenDNS-Session=aa51dc5c
>> 0ccc5aad4_608281d70f7e0048fe08ad20d64c90e9397c_88c6df1b74931
>> 9ddd6a2c4c99580bf4b82dc30d2_
>> Resolving 88c6df1b749319ddd6a2c4c99580bf4b82dc.d0452297.id.opendns.com (
>> 88c6df1b749319ddd6a2c4c99580bf4b82dc.d0452297.id.opendns.com)...
>> 208.69.34.151
>> Connecting to 88c6df1b749319ddd6a2c4c99580bf
>> 4b82dc.d0452297.id.opendns.com (88c6df1b749319ddd6a2c4c99580b
>> f4b82dc.d0452297.id.opendns.com)|208.69.34.151|:80... connected.
>> HTTP request sent, awaiting response... 302 Moved Temporarily
>> Location: http://www.openvas.org/openvas-nvt-feed-current.tar.bz2?X-
>> OpenDNS-Session=aa51dc5c0ccc5aad4_608281d70f7e0048fe08ad20d6
>> 4c90e9397c_88c6df1b749319ddd6a2c4c99580bf4b82dc30d2_ [following]
>> --2017-02-20 18:19:53--  http://www.openvas.org/openvas
>> -nvt-feed-current.tar.bz2?X-OpenDNS-Session=aa51dc5c0ccc5a
>> ad4_608281d70f7e0048fe08ad20d64c90e9397c_88c6df1b749319ddd6a
>> 2c4c99580bf4b82dc30d2_
>> Connecting to www.openvas.org (www.openvas.org)|208.69.34.25|:80...
>> connected.
>> HTTP request sent, awaiting response... 302 Moved Temporarily
>> Location: /openvas-nvt-feed-current.tar.bz2 [following]
>> --2017-02-20 18:19:53--  http://www.openvas.org/openvas
>> -nvt-feed-current.tar.bz2
>> Reusing existing connection to www.openvas.org:80.
>> HTTP request sent, awaiting response... 302 Moved Temporarily
>> Location: https://malware.opendns.com/?server=lon15=http://www.ope
>> nvas.org/openvas-nvt-feed-current.tar.bz2=y=
>> FQVoGQF8ABouBQpwGAgdFQ===20544=0x5020
>> 03bf,0xd40078080001 [following]
>> --2017-02-20 18:19:54--  https://malware.opendns.com/?s
>> erver=lon15=http://www.openvas.org/openvas-nvt-feed-curr
>> ent.tar.bz2=y=FQVoGQF8ABouBQpwGAgdFQ==&
>> prefs=20544=0x502003bf,0xd40078080001
>> Resolving malware.opendns.com (malware.opendns.com)...
>> :::208.69.34.152, 208.69.34.152
>> Connecting to malware.opendns.com 
>> (malware.opendns.com)|:::208.69.34.152|:443...
>> connected.
>> HTTP request sent, awaiting response... 302 Moved Temporarily
>> Location: http://278b3281802dc5b5495ea0cff94155af6d49.d0452297.id.
>> opendns.com/s/malware.opendns.com/index.php?X-OpenDNS-
>> Session=aa51dc5c0ccc5aad4_56fb6dc300e8a046230be27061796a12a1
>> 69_278b3281802dc5b5495ea0cff94155af6d49eb4d_server=lon15&
>> url=http://www.openvas.org/openvas-nvt-feed-current.tar.bz2;
>> proxy=y=FQVoGQF8ABouBQpwGAgdFQ===20544=
>> 0x502003bf,0xd40078080001 [following]
>> --2017-02-20 18:19:55--  

Re: [Openvas-discuss] Unable to Sync

[Reindl Harald]

Am 20.02.2017 um 14:14 schrieb Eero Volotinen:

sounds like client is using opendns for filtering?

is it forced or manually configured? try replacing with google dns
8.8.8.8 and try again.


NO - when you work in a company you are *not* supposed to bypass your 
network admins and if you do so instead cooridnate with your network 
staff you may get fired from your job


please stop confusing your private setups or your companies one where 
you probably make the rules (as i do in ours) with other emvironments



You still need to install md5sums package to get feed working..

2017-02-20 15:11 GMT+02:00 Christian Fischer
>:

Hi,

On 20.02.2017 14:07, Eero Volotinen wrote:
> install bzip2 and md5sum tools from package management and try again.

in this case this won't help here.

Please contact your network administrator about this issue. From the
output and the redirect to malware.opendns.com
 we can see that there is
some proxy in between causing the shown issue.

Regards,

___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] Unable to Sync

[Eero Volotinen]

sounds like client is using opendns for filtering?

is it forced or manually configured? try replacing with google dns 8.8.8.8
and try again.
You still need to install md5sums package to get feed working..

--
Eero

2017-02-20 15:11 GMT+02:00 Christian Fischer <
christian.fisc...@greenbone.net>:

> Hi,
>
> On 20.02.2017 14:07, Eero Volotinen wrote:
> > install bzip2 and md5sum tools from package management and try again.
>
> in this case this won't help here.
>
> Please contact your network administrator about this issue. From the
> output and the redirect to malware.opendns.com we can see that there is
> some proxy in between causing the shown issue.
>
> Regards,
>
> --
>
> Christian Fischer | PGP Key: 0x54F3CE5B76C597AD
> Greenbone Networks GmbH | http://greenbone.net
> Neumarkt 12, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460
> Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
> ___
> Openvas-discuss mailing list
> Openvas-discuss@wald.intevation.org
> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
>
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] Unable to Sync

[Christian Fischer]

Hi,

On 20.02.2017 14:07, Eero Volotinen wrote:
> install bzip2 and md5sum tools from package management and try again.

in this case this won't help here.

Please contact your network administrator about this issue. From the
output and the redirect to malware.opendns.com we can see that there is
some proxy in between causing the shown issue.

Regards,

-- 

Christian Fischer | PGP Key: 0x54F3CE5B76C597AD
Greenbone Networks GmbH | http://greenbone.net
Neumarkt 12, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] Unable to Sync

[Eero Volotinen]

install bzip2 and md5sum tools from package management and try again.

Eero

2017-02-20 14:50 GMT+02:00 system cambium :

> Team,
>
> I have been trying to update library of openvas using "openvas-nvt-sync",
> but unfortunately, it fails to update.
>
> Tried multiple methods to install it based on solutions poped-up in google
> search. Still had no success.
>
> Below are the logs:
>
> sit-india@sitindia-Latitude-E5440:~$ sudo openvas-nvt-sync
> [sudo] password for sit-india:
> [i] This script synchronizes an NVT collection with the 'OpenVAS NVT Feed'.
> [i] The 'OpenVAS NVT Feed' is provided by 'The OpenVAS Project'.
> [i] Online information about this feed: 'http://www.openvas.org/
> openvas-nvt-feed.html'.
> [i] NVT dir: /var/lib/openvas/plugins
> [w] Could not determine feed version.
> [i] rsync is not recommended for the initial sync. Falling back on http.
> [i] Will use wget
> [i] Using GNU wget: /usr/bin/wget
> [i] Configured NVT http feed: http://www.openvas.org/
> openvas-nvt-feed-current.tar.bz2
> [i] Downloading to: /tmp/openvas-nvt-sync.GeOdasxiTx/openvas-feed-2017-
> 02-20-2734.tar.bz2
> --2017-02-20 18:19:52--  http://www.openvas.org/
> openvas-nvt-feed-current.tar.bz2
> Resolving www.openvas.org (www.openvas.org)... 208.69.34.25,
> :::208.69.34.26
> Connecting to www.openvas.org (www.openvas.org)|208.69.34.25|:80...
> connected.
> HTTP request sent, awaiting response... 302 Moved Temporarily
> Location: http://88c6df1b749319ddd6a2c4c99580bf4b82dc.d0452297.id.opendns.
> com/h/www.openvas.org/openvas-nvt-feed-current.tar.bz2?X-OpenDNS-Session=
> aa51dc5c0ccc5aad4_608281d70f7e0048fe08ad20d64c90e9397c_
> 88c6df1b749319ddd6a2c4c99580bf4b82dc30d2_ [following]
> --2017-02-20 18:19:52--  http://88c6df1b749319ddd6a2c4c99580bf
> 4b82dc.d0452297.id.opendns.com/h/www.openvas.org/openvas-
> nvt-feed-current.tar.bz2?X-OpenDNS-Session=aa51dc5c0ccc5aad4_
> 608281d70f7e0048fe08ad20d64c90e9397c_88c6df1b749319ddd6a2c4c99580bf
> 4b82dc30d2_
> Resolving 88c6df1b749319ddd6a2c4c99580bf4b82dc.d0452297.id.opendns.com (
> 88c6df1b749319ddd6a2c4c99580bf4b82dc.d0452297.id.opendns.com)...
> 208.69.34.151
> Connecting to 88c6df1b749319ddd6a2c4c99580bf4b82dc.d0452297.id.opendns.com
> (88c6df1b749319ddd6a2c4c99580bf4b82dc.d0452297.id.opendns.com)|208.69.34.151|:80...
> connected.
> HTTP request sent, awaiting response... 302 Moved Temporarily
> Location: http://www.openvas.org/openvas-nvt-feed-current.tar.
> bz2?X-OpenDNS-Session=aa51dc5c0ccc5aad4_608281d70f7e0048fe08ad20d64c90
> e9397c_88c6df1b749319ddd6a2c4c99580bf4b82dc30d2_ [following]
> --2017-02-20 18:19:53--  http://www.openvas.org/
> openvas-nvt-feed-current.tar.bz2?X-OpenDNS-Session=aa51dc5c0ccc5aad4_
> 608281d70f7e0048fe08ad20d64c90e9397c_88c6df1b749319ddd6a2c4c99580bf
> 4b82dc30d2_
> Connecting to www.openvas.org (www.openvas.org)|208.69.34.25|:80...
> connected.
> HTTP request sent, awaiting response... 302 Moved Temporarily
> Location: /openvas-nvt-feed-current.tar.bz2 [following]
> --2017-02-20 18:19:53--  http://www.openvas.org/
> openvas-nvt-feed-current.tar.bz2
> Reusing existing connection to www.openvas.org:80.
> HTTP request sent, awaiting response... 302 Moved Temporarily
> Location: https://malware.opendns.com/?server=lon15=http://www.
> openvas.org/openvas-nvt-feed-current.tar.bz2=y&
> origin=FQVoGQF8ABouBQpwGAgdFQ===20544=0x502003bf,
> 0xd40078080001 [following]
> --2017-02-20 18:19:54--  https://malware.opendns.com/?
> server=lon15=http://www.openvas.org/openvas-nvt-feed-
> current.tar.bz2=y=FQVoGQF8ABouBQpwGAgdFQ=
> ==20544=0x502003bf,0xd40078080001
> Resolving malware.opendns.com (malware.opendns.com)...
> :::208.69.34.152, 208.69.34.152
> Connecting to malware.opendns.com 
> (malware.opendns.com)|:::208.69.34.152|:443...
> connected.
> HTTP request sent, awaiting response... 302 Moved Temporarily
> Location: http://278b3281802dc5b5495ea0cff94155af6d49.d0452297.id.opendns.
> com/s/malware.opendns.com/index.php?X-OpenDNS-Session=aa51dc5c0ccc5aad4_
> 56fb6dc300e8a046230be27061796a12a169_278b3281802dc5b5495ea0cff94155
> af6d49eb4d_server=lon15=http://www.openvas.org/
> openvas-nvt-feed-current.tar.bz2=y=FQVoGQF8ABouBQpwGAgdFQ==&
> prefs=20544=0x502003bf,0xd40078080001 [following]
> --2017-02-20 18:19:55--  http://278b3281802dc5b5495ea0cff94155
> af6d49.d0452297.id.opendns.com/s/malware.opendns.com/
> index.php?X-OpenDNS-Session=aa51dc5c0ccc5aad4_
> 56fb6dc300e8a046230be27061796a12a169_278b3281802dc5b5495ea0cff94155
> af6d49eb4d_server=lon15=http://www.openvas.org/
> openvas-nvt-feed-current.tar.bz2=y=FQVoGQF8ABouBQpwGAgdFQ==&
> prefs=20544=0x502003bf,0xd40078080001
> Resolving 278b3281802dc5b5495ea0cff94155af6d49.d0452297.id.opendns.com (
> 278b3281802dc5b5495ea0cff94155af6d49.d0452297.id.opendns.com)...
> 208.69.34.151
> Connecting to 278b3281802dc5b5495ea0cff94155af6d49.d0452297.id.opendns.com
> (278b3281802dc5b5495ea0cff94155af6d49.d0452297.id.opendns.com)|208.69.34.151|:80...

[Openvas-discuss] Unable to Sync

[system cambium]

Team,

I have been trying to update library of openvas using "openvas-nvt-sync",
but unfortunately, it fails to update.

Tried multiple methods to install it based on solutions poped-up in google
search. Still had no success.

Below are the logs:

sit-india@sitindia-Latitude-E5440:~$ sudo openvas-nvt-sync
[sudo] password for sit-india:
[i] This script synchronizes an NVT collection with the 'OpenVAS NVT Feed'.
[i] The 'OpenVAS NVT Feed' is provided by 'The OpenVAS Project'.
[i] Online information about this feed: '
http://www.openvas.org/openvas-nvt-feed.html'.
[i] NVT dir: /var/lib/openvas/plugins
[w] Could not determine feed version.
[i] rsync is not recommended for the initial sync. Falling back on http.
[i] Will use wget
[i] Using GNU wget: /usr/bin/wget
[i] Configured NVT http feed:
http://www.openvas.org/openvas-nvt-feed-current.tar.bz2
[i] Downloading to:
/tmp/openvas-nvt-sync.GeOdasxiTx/openvas-feed-2017-02-20-2734.tar.bz2
--2017-02-20 18:19:52--
http://www.openvas.org/openvas-nvt-feed-current.tar.bz2
Resolving www.openvas.org (www.openvas.org)... 208.69.34.25,
:::208.69.34.26
Connecting to www.openvas.org (www.openvas.org)|208.69.34.25|:80...
connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location:
http://88c6df1b749319ddd6a2c4c99580bf4b82dc.d0452297.id.opendns.com/h/www.openvas.org/openvas-nvt-feed-current.tar.bz2?X-OpenDNS-Session=aa51dc5c0ccc5aad4_608281d70f7e0048fe08ad20d64c90e9397c_88c6df1b749319ddd6a2c4c99580bf4b82dc30d2_
[following]
--2017-02-20 18:19:52--
http://88c6df1b749319ddd6a2c4c99580bf4b82dc.d0452297.id.opendns.com/h/www.openvas.org/openvas-nvt-feed-current.tar.bz2?X-OpenDNS-Session=aa51dc5c0ccc5aad4_608281d70f7e0048fe08ad20d64c90e9397c_88c6df1b749319ddd6a2c4c99580bf4b82dc30d2_
Resolving 88c6df1b749319ddd6a2c4c99580bf4b82dc.d0452297.id.opendns.com (
88c6df1b749319ddd6a2c4c99580bf4b82dc.d0452297.id.opendns.com)...
208.69.34.151
Connecting to 88c6df1b749319ddd6a2c4c99580bf4b82dc.d0452297.id.opendns.com (
88c6df1b749319ddd6a2c4c99580bf4b82dc.d0452297.id.opendns.com)|208.69.34.151|:80...
connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location:
http://www.openvas.org/openvas-nvt-feed-current.tar.bz2?X-OpenDNS-Session=aa51dc5c0ccc5aad4_608281d70f7e0048fe08ad20d64c90e9397c_88c6df1b749319ddd6a2c4c99580bf4b82dc30d2_
[following]
--2017-02-20 18:19:53--
http://www.openvas.org/openvas-nvt-feed-current.tar.bz2?X-OpenDNS-Session=aa51dc5c0ccc5aad4_608281d70f7e0048fe08ad20d64c90e9397c_88c6df1b749319ddd6a2c4c99580bf4b82dc30d2_
Connecting to www.openvas.org (www.openvas.org)|208.69.34.25|:80...
connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: /openvas-nvt-feed-current.tar.bz2 [following]
--2017-02-20 18:19:53--
http://www.openvas.org/openvas-nvt-feed-current.tar.bz2
Reusing existing connection to www.openvas.org:80.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location:
https://malware.opendns.com/?server=lon15=http://www.openvas.org/openvas-nvt-feed-current.tar.bz2=y=FQVoGQF8ABouBQpwGAgdFQ===20544=0x502003bf,0xd40078080001
[following]
--2017-02-20 18:19:54--
https://malware.opendns.com/?server=lon15=http://www.openvas.org/openvas-nvt-feed-current.tar.bz2=y=FQVoGQF8ABouBQpwGAgdFQ===20544=0x502003bf,0xd40078080001
Resolving malware.opendns.com (malware.opendns.com)...
:::208.69.34.152, 208.69.34.152
Connecting to malware.opendns.com
(malware.opendns.com)|:::208.69.34.152|:443...
connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location:
http://278b3281802dc5b5495ea0cff94155af6d49.d0452297.id.opendns.com/s/malware.opendns.com/index.php?X-OpenDNS-Session=aa51dc5c0ccc5aad4_56fb6dc300e8a046230be27061796a12a169_278b3281802dc5b5495ea0cff94155af6d49eb4d_server=lon15=http://www.openvas.org/openvas-nvt-feed-current.tar.bz2=y=FQVoGQF8ABouBQpwGAgdFQ===20544=0x502003bf,0xd40078080001
[following]
--2017-02-20 18:19:55--
http://278b3281802dc5b5495ea0cff94155af6d49.d0452297.id.opendns.com/s/malware.opendns.com/index.php?X-OpenDNS-Session=aa51dc5c0ccc5aad4_56fb6dc300e8a046230be27061796a12a169_278b3281802dc5b5495ea0cff94155af6d49eb4d_server=lon15=http://www.openvas.org/openvas-nvt-feed-current.tar.bz2=y=FQVoGQF8ABouBQpwGAgdFQ===20544=0x502003bf,0xd40078080001
Resolving 278b3281802dc5b5495ea0cff94155af6d49.d0452297.id.opendns.com (
278b3281802dc5b5495ea0cff94155af6d49.d0452297.id.opendns.com)...
208.69.34.151
Connecting to 278b3281802dc5b5495ea0cff94155af6d49.d0452297.id.opendns.com (
278b3281802dc5b5495ea0cff94155af6d49.d0452297.id.opendns.com)|208.69.34.151|:80...
connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location:
https://malware.opendns.com/index.php?X-OpenDNS-Session=aa51dc5c0ccc5aad4_56fb6dc300e8a046230be27061796a12a169_278b3281802dc5b5495ea0cff94155af6d49eb4d_server=lon15=http://www.openvas.org/openvas-nvt-feed-current.tar.bz2=y=FQVoGQF8ABouBQpwGAgdFQ===20544=0x502003bf,0xd40078080001
[following]

Re: [Openvas-discuss] Doubt

[Eero Volotinen]

Then just disable keep alive check.

Eero

2017-02-20 13:58 GMT+02:00 Shreyas M R :

> nmap is giving me findings. ping is disabled to that machine redis is
> ri=unning fine
>
>
>
> [image: --]
>
> Shreyas M R
> [image: http://]about.me/shreyasmrs
> 
>
>
> On Mon, Feb 20, 2017 at 5:01 PM, Michael Meyer <
> michael.me...@greenbone.net> wrote:
>
>> *** Shreyas M R wrote:
>>
>> > I have two machines which are located in different city but are
>> connected
>> > to same network.
>> > I'm able to scan the machines with each other using nessus and when I
>> use
>> > openvas its getting completed within seconds and giving no results
>>
>> "no results" are often related to:
>>
>> nmap not installed (install nmap)
>> redis not running  (start redis)
>> target does not respond to ping. (use a different "alive test").
>>
>> Micha
>>
>> --
>> Michael Meyer  OpenPGP Key: 0xAF069E9152A6EFA6
>> http://www.greenbone.net/
>> Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG
>> Osnabrück, HR B 202460
>> Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
>> ___
>> Openvas-discuss mailing list
>> Openvas-discuss@wald.intevation.org
>> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/o
>> penvas-discuss
>>
>
>
> ___
> Openvas-discuss mailing list
> Openvas-discuss@wald.intevation.org
> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
>
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] Doubt

[Shreyas M R]

running*



[image: --]

Shreyas M R
[image: http://]about.me/shreyasmrs



On Mon, Feb 20, 2017 at 5:28 PM, Shreyas M R  wrote:

> nmap is giving me findings. ping is disabled to that machine redis is
> ri=unning fine
>
>
>
> [image: --]
>
> Shreyas M R
> [image: http://]about.me/shreyasmrs
> 
>
>
> On Mon, Feb 20, 2017 at 5:01 PM, Michael Meyer <
> michael.me...@greenbone.net> wrote:
>
>> *** Shreyas M R wrote:
>>
>> > I have two machines which are located in different city but are
>> connected
>> > to same network.
>> > I'm able to scan the machines with each other using nessus and when I
>> use
>> > openvas its getting completed within seconds and giving no results
>>
>> "no results" are often related to:
>>
>> nmap not installed (install nmap)
>> redis not running  (start redis)
>> target does not respond to ping. (use a different "alive test").
>>
>> Micha
>>
>> --
>> Michael Meyer  OpenPGP Key: 0xAF069E9152A6EFA6
>> http://www.greenbone.net/
>> Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG
>> Osnabrück, HR B 202460
>> Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
>> ___
>> Openvas-discuss mailing list
>> Openvas-discuss@wald.intevation.org
>> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/o
>> penvas-discuss
>>
>
>
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] Doubt

[Shreyas M R]

nmap is giving me findings. ping is disabled to that machine redis is
ri=unning fine



[image: --]

Shreyas M R
[image: http://]about.me/shreyasmrs



On Mon, Feb 20, 2017 at 5:01 PM, Michael Meyer 
wrote:

> *** Shreyas M R wrote:
>
> > I have two machines which are located in different city but are connected
> > to same network.
> > I'm able to scan the machines with each other using nessus and when I use
> > openvas its getting completed within seconds and giving no results
>
> "no results" are often related to:
>
> nmap not installed (install nmap)
> redis not running  (start redis)
> target does not respond to ping. (use a different "alive test").
>
> Micha
>
> --
> Michael Meyer  OpenPGP Key: 0xAF069E9152A6EFA6
> http://www.greenbone.net/
> Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG
> Osnabrück, HR B 202460
> Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
> ___
> Openvas-discuss mailing list
> Openvas-discuss@wald.intevation.org
> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
>
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] Doubt

[Michael Meyer]

*** Shreyas M R wrote:

> I have two machines which are located in different city but are connected
> to same network.
> I'm able to scan the machines with each other using nessus and when I use
> openvas its getting completed within seconds and giving no results

"no results" are often related to:

nmap not installed (install nmap)
redis not running  (start redis)
target does not respond to ping. (use a different "alive test").

Micha

-- 
Michael Meyer  OpenPGP Key: 0xAF069E9152A6EFA6 
http://www.greenbone.net/
Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG
Osnabrück, HR B 202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] Doubt

[Eero Volotinen]

ask from firewall admin.

Eero

2017-02-20 13:05 GMT+02:00 Shreyas M R :

> Hi all,
>
> I have two machines which are located in different city but are connected
> to same network.
> I'm able to scan the machines with each other using nessus and when I use
> openvas its getting completed within seconds and giving no results
>
> Please help in this issue
>
> thanks
>
>
> [image: --]
>
> Shreyas M R
> [image: http://]about.me/shreyasmrs
> 
>
>
> ___
> Openvas-discuss mailing list
> Openvas-discuss@wald.intevation.org
> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
>
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

[Openvas-discuss] Doubt

[Shreyas M R]

Hi all,

I have two machines which are located in different city but are connected
to same network.
I'm able to scan the machines with each other using nessus and when I use
openvas its getting completed within seconds and giving no results

Please help in this issue

thanks


[image: --]

Shreyas M R
[image: http://]about.me/shreyasmrs

___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] Duplicate vulnerability reported

[Michael Meyer]

*** Helmut Koers wrote:

> I have one vulnerability identified twice on a single 
> system/protocol/port.
> 
> Citrix NetScaler Application Delivery Controller and NetScaler Gateway 
> Multiple Security Updates (CTX206001)
> OID:1.3.6.1.4.1.25623.1.0.105538
> 
> The only difference I notified is the identified versions:
> 
> Installed version: 10.1 build 129.22
> Installed version: 10.1.129.22 build 129.22
> 
> Shouldn't one exclude the other so that it is reported once only?

Thanks for reporting. I'll have a look.

Micha

-- 
Michael Meyer  OpenPGP Key: 0xAF069E9152A6EFA6 
http://www.greenbone.net/
Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG
Osnabrück, HR B 202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss