Re: [Openvas-discuss] OpenVAS9 hanging nasl tasks (REDUX)
That did the trick. Thanks! I think i'm back in action with this. :-) Pete ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS9 hanging nasl tasks (REDUX)
Hi, On 06.04.2018 00:43, Pete @ GREENUP ENGINEERING wrote: > "The request contained an unknown or invalid Host header. If you are > trying to access GSA via its hostname or a proxy, make sure GSA is set > up to allow it." the related Pull Request with those changes can be found here: https://github.com/greenbone/gsa/pull/318 Have a look at the --allow-header-host parameter of gsad (gsad --help) on how to add additional IP addresses and hostnames. If you e.g. access the GSA via https://gsa.example.com you need to start gsad with: gsad --allow-header-host "gsa.example.com" Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neumarkt 12, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS9 hanging nasl tasks (REDUX)
Ok, so with an upgrade (and then another one) I just have a mixed bag of different issues across 3 installs. 2 of them i think are sorted (for now), but the last one has me a bit stumped, and isn't related to the subject/original topic. Last night i did an upgrade via the repo on the three servers. It was to a level beyond where i was at, but not up to source code level yet. Everything installed ok, and scans started taking the time i would expect. I thought "IT'S FIXED!!!": Pleased i was. But no such luck - this morning, although scans moved along and finished, 2 servers had issues. One had the manager stopped and the other had the scanner stopped, the 3rd was was chugging along fine. Pleased i wasn't. On one of them i did some flushing and rebuilding and things came good again, am back scanning fast and all services seem to be remaining running. I couldn't find a way to get the other one where the manager service wouldn't start working, so thought i would try to get it on the source-code level. Mohammad had just yesterday brought his repo up to source-code level, so I took a snapshot and did the upgrade and lots of stuff failed. I backed out to the snapshot point and tried again (i dont think i did anything different), things when smoother this time, and services seem to be running, but with the gsa 7.0.3 upgrade a problem was introduced which means i cant access the WebUI. I get the login page ok, enter my username and password, then get a one line text response of "The request contained an unknown or invalid Host header. If you are trying to access GSA via its hostname or a proxy, make sure GSA is set up to allow it." Searching for those words don't yield me answers beyond the fact that this error text was recently added to the gsad.c file in 7.0.3 (wasn't there in 7.0.2 which is what i am successfully running on the other 2 systems). https://fossies.org/linux/misc/openvas/gsa-7.0.3.tar.gz/gsa-7.0.3/src/gsad.c#l_261 https://fossies.org/diffs/gsa/7.0.2_vs_7.0.3/src/gsad.c-diff.html Seems like something isn;t right in the new GSA 7.0.3 version. Was wondering if anyone else has some input, although might be better to start a new thread? Cheers Thanks ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS9 hanging nasl tasks (REDUX)
Hi I sent a response, not sure why it didn't come through on my other address. I noticed Mohammad's openvas9 repo DOES have a small update (6 days ago) beyond what i was running. I did an apt-get update and upgrade and it updated openvas scanner, manager, gsa, and a few other things (libopenvas9 i think) so now things work as expected: Scans don't hang, and move through at an expected pace. Cheers/Thanks ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS9 hanging nasl tasks (REDUX)
Thanks.This is a prod system and need it to be repo built so i can easily keep it current/updated. Can i do a manual install of the latest code from source over the top of the existing repo install, leave the repo in place and when it gets updated, running an update would bring things to currency with a repo? Thanks ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS9 hanging nasl tasks (REDUX)
Hi, On 04.04.2018 03:19, Pete Greenup wrote: > would i be better to either install that from source, or see if/when Mohammad > will > update the repo to include the latest code? those are the two options you currently have to work around this which is already fixed in the latest available versions of scanner and libraries available at http://www.openvas.org/install-source.html Working around this issue on NVT side doesn't make a sense anymore as the behavior might be triggered by any NVT (not only the mentioned) depending on e.g. the available services on a target or the dependency chain of specific NVTs. Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neumarkt 12, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
