Re: [Openvas-discuss] WebUI not working anymore

2015-05-04 Thread Matthew Mundell
I just started a scan and now I cant access to the webgui anymore, already did some research lowered log levels but it dont seems to work glib-critical (recursed) ** g_string_erase assertion pos + len = string- len' failed This does look like the logging error. Did you turn off GSA

Re: [Openvas-discuss] Error deleting report formats

2015-05-04 Thread Matthew Mundell
I was just playing around with custom report formats and I stumbled across a problem. If I try to delete a report format in GSA I get an Internal Error message. Thanks. This should work with r22277. Backported to Manager 6 in r22278 so it should be in the next stable Manager release. --

Re: [Openvas-discuss] OpenVAS8: Access Control

2015-04-20 Thread Matthew Mundell
the belonging action for his own tasks, schedules, settings and so forth. I would need the observer to be able to read the reports of another user including notes and overrides. 20.04.201512:26:24matthew.mund...@greenbone.net wrote on 20.04.2015 12:45:23: From: Matthew Mundell matthew

Re: [Openvas-discuss] OpenVAS8: Access Control

2015-04-20 Thread Matthew Mundell
Thanks, this is what I was looking for. Are there any plans to allow access to notes or overrides on a per task or per report base? It'll be tough to permit access on a per note basis, since we are using them a lot. No, there are no plans for that yet. But we are still feeling out the

Re: [Openvas-discuss] Logging of scheduled scans

2015-03-30 Thread Matthew Mundell
I am having issues with scheduled scans that I wanted to investigate using the log files. Unfortunately there seem to be no log entries for scheduled scans, in contrast to manual scans. Is there any way to enable logging for scheduled scans? Which log messages are you referring to? If you

Re: [Openvas-discuss] Logging of scheduled scans

2015-03-30 Thread Matthew Mundell
I am not referring to any specific log messages, I just noticed that there are log entries showing up for manual scans, but not for scheduled scans. Is there any information available which information is included in which log levels? Not really. The level names should give a hint. Each

Re: [Openvas-discuss] Credentialed scanning problem

2015-03-25 Thread Matthew Mundell
Do you have a port scanner selected in your Config? Usually it's nmap (nasl wrapper) and Ping Host, from family Port Scanners. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner

Re: [Openvas-discuss] Strange results when trying to get all reports

2015-03-20 Thread Matthew Mundell
- #!/bin/sh # Description: import of all reports generated by OpenVAS IMPORT_FILE=openvas_reports.csv # csv format id REPORT_FORMAT_ID=9087b18c-626c-11e3-8892-406186ea4fc5 # Get reports omp -u admin -w admin -X ' get_reports format_id='$REPORT_FORMAT_ID'/ Try

Re: [Openvas-discuss] Mail subject of alerts

2015-03-18 Thread Matthew Mundell
A quick question, is it possible to change the subject of alerts ? Theoretically it's a call to sendmail, so yes I guess ? The subject is hard coded in Manager, so it's only possible if you change the C code. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG

Re: [Openvas-discuss] Report format creation

2015-03-18 Thread Matthew Mundell
Everything was ok (xml generation ok, import in gsa ok, verification ok) until the point where I select the new created format in my alert and I click the test button : Results of last operation Operation: Test Alert Status code: 500 Status message: Internal error First step is to enable

Re: [Openvas-discuss] multi-tiered environment

2015-03-07 Thread Matthew Mundell
I did a little googling and couldn't find any reference to this, but I am trying to setup a multi-tiered environment. I have a few customers that I need to scan, but that information also needs to feed up into a top tier server. So, in theory, server A and server B have scanners and initiate

Re: [Openvas-discuss] import a task

2015-02-26 Thread Matthew Mundell
in the GSA is a Button 'Export Task'. But how can I import a task? It is not yet possible to directly import the exported XML for a task. You could do some processing on the exported XML to create an OMP CREATE_TASK request, and then run the OMP request to create the task. -- Greenbone

Re: [Openvas-discuss] Strange behaviour when working on scan configs

2015-02-26 Thread Matthew Mundell
I tried cloning Full and very deep on OpenVAS-7 and it worked OK. Cloning is not the problem. That works fine. Once I start editing the clone, the problem starts. As shown in the screencast and screenshots, I cannot use any comment, that holds anthing else but charcters. Even a whitespace

Re: [Openvas-discuss] Strange behaviour when working on scan configs

2015-02-26 Thread Matthew Mundell
It also happens, when I clone one of the default configurations w/o any editing. For ease of explanation, I took a screencast: https://drive.google.com/file/d/0B08MjN6ustyda3BQd1VmS2VULTg/view?usp=sharing It even happens when I create a clean config. None of the things I select/check is

Re: [Openvas-discuss] Problems logging in via ssh through slave

2015-02-10 Thread Matthew Mundell
I'm having a problem that I think is a bug, but would like to run it past the community, in case I'm missing something. Thanks Todd. Yes I can confirm that the SSH port was not being sent to the slave. Fixed in trunk in r21582 and r21583. Should be in the next round of OpenVAS-7 releases

Re: [Openvas-discuss] sharing targets across

2015-02-09 Thread Matthew Mundell
We have the same problem here. Could you please step us through how to make the target readable to role Admin? We don't mind if it's in the GUI, command line, etc. Any help gratefully received! It should work if you use the OMP CREATE_PERMISSION command via the command line. Permission

Re: [Openvas-discuss] Reports - OMP List/Delete Command?

2015-01-14 Thread Matthew Mundell
Is there an easy way from the omp command line that I can list ALL the reports and delete them? Using the GUI works fine, but hoping that I can list/delete them quicker from the command line. Thanks! You can use the GET_REPORTS OMP command to get a list of reports on the command line.

Re: [Openvas-discuss] create task quickly using omp

2015-01-05 Thread Matthew Mundell
The omp document says we can use omp -X create_task.../create_task to create a task, it needs either an rcfile or both a target id and a config id. The RCFILE option was added to support the old GTK client. We've removed it for OpenVAS 8. I want to create a task whose config and target

Re: [Openvas-discuss] Knowledge base isn't being saved after a scan

2014-12-02 Thread Matthew Mundell
The strange thing is that on another system, I'm running an older version of OpenVAS (Scanner 3.3.1, Manager 3.0.6, Admin 1.2.1, GSAD 3.0.3) and it works fine, but I can't scan my fragile host from that system due to the network setup. On that system, I can see the KBs being saved in

Re: [Openvas-discuss] Knowledge base isn't being saved after a scan

2014-12-02 Thread Matthew Mundell
Hmm...If that's the case, then that's a pretty significant change that should have been put into the update notes when it was released. Also, if KB saving has been removed, then the save_kb option should be removed too, as setting it to yes won't do anything. From openvas-scanner/CHANGES:

Re: [Openvas-discuss] Sqlite?

2014-11-25 Thread Matthew Mundell
It was initially chosen because SQLite is a lighter, simpler option. In trunk we now have Postgres support, which is nearly ready for general use. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr.

Re: [Openvas-discuss] libuuid

2014-11-20 Thread Matthew Mundell
Does anybody know if there is any way to ask OPENVAS for new UUID code to use it in custom object in the DB? From Manager code you can run make_uuid () in an SQL statement. Or you can just run uuid on the command line. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany |

Re: [Openvas-discuss] cli - manager - scanner comunication

2014-11-07 Thread Matthew Mundell
started manager with openvasmd --rebuild --slisten=scanner_ip_address amp; openvasmd The second openvasmd command needs the --slisten=scanner_ip_address too. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald,

Re: [Openvas-discuss] One manager More scanners

2014-11-07 Thread Matthew Mundell
can i governate more scanner using one manager? Not yet. However, you can use the slave feature to control multiple slave managers with one master manager. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald,

Re: [Openvas-discuss] OpenVAS 7

2014-10-20 Thread Matthew Mundell
1) Why is there an old openvasd delivered with the OpenVAS 7 version? Please give more details about where you got the package/source from. 2) How to add an adminitrative user? With openvas 6 on an other machine I could use openvas-adduser. This won't work after removing openvasd, like

Re: [Openvas-discuss] Observers and Overrides

2014-10-17 Thread Matthew Mundell
That did it... tasks are visible now, but the user does still not see any applied notes and overrides. Yes, that is how it works currently. Anyone who can help here? This is not yet properly catered for. You could give the user permission on the specific override/note on the Permissions

Re: [Openvas-discuss] OpenVAS version 6 to 7 migration

2014-10-14 Thread Matthew Mundell
That would not work in my environment, since OpenVAS does not even start up completely as of a database version mismatch (see logfile entries below). In addition, if that would not be the case, there would be no users since users are maintained in the database in OpenVAS 7, but are maintained

Re: [Openvas-discuss] Parsing OpenVAS XML from Dradis

2014-10-06 Thread Matthew Mundell
I don't think I made my self clear. We don't have access to the OpenVAS instance, can't run any commands against it. As far as I understand the results XML has nothing to do with the OMP or OAP protocols (but I may be wrong here). The report is part of the GET_REPORTS command response. So

Re: [Openvas-discuss] Unable to add target with credentials using OMP

2014-09-18 Thread Matthew Mundell
Any help would be much appreciated! The Manager logs (var/log/openvas/openvasmd.log) may indicate why the CREATE_TARGET is failing. To enable logging: add -v to openvasmd, and replace 127 with 128 in etc/openvas/openvasmd_log.conf. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck,

Re: [Openvas-discuss] Unable to add target with credentials using OMP

2014-09-18 Thread Matthew Mundell
Sending to manager: create_target nameJohns Test VM/name hosts10.0.1.17/hosts ssh_lsc_credential id=”d50da9b2-58a3-4c19-8194-a3d1d5d7ca14” The UTF-8 quotation marks here seem to be the problem. Try with a regular . port22/port /ssh_lsc_credential /create_target

Re: [Openvas-discuss] OpenVAS 7

2014-09-15 Thread Matthew Mundell
Wow, didn't notice that before (I never noticed --get-tasks took an argument). But yeah, can verify that on OpenVAS 7 omp --get-tasks task uuid doesn't do anything. This should be solved in trunk by r20379. Will be in the next openvas-cli release. -- Greenbone Networks GmbH Neuer

Re: [Openvas-discuss] OpenVAS 7

2014-09-12 Thread Matthew Mundell
Could you give a little more details about what part is not working? The -v switch to omp might help to show more info about where it's failing. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver

Re: [Openvas-discuss] Syslog alerts

2014-08-27 Thread Matthew Mundell
I have an alert that goes to the syslog, which outputs syslog[24764]: Task run status changed: Task status changed to 'Done'. It would be more helpful if this told me which task was which, and preferably if it would identify itself as OpenVAS. Is any of that user configurable? No, that's all

Re: [Openvas-discuss] general question...

2014-08-25 Thread Matthew Mundell
Hope this is not a bad question. On my scanning computer in the /var/lib/openvas/mgr directory are files...tasks.db-x...that date back to the implementation of OpenVAS. They are not large files, but there are lots of them. Is there any clean-up process? Can I delete some of them?

Re: [Openvas-discuss] Adjusting browser timeout

2014-08-25 Thread Matthew Mundell
Is there a place to adjust the browser timeout? I have a large report I'm trying to export into PDF and the browser times out before the report exports in GSAD. It's the --timeout option of gsad. See gsad --help. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG

Re: [Openvas-discuss] OTP and Scanner

2014-08-02 Thread Matthew Mundell
how exactly does the scanner know which NVTs should be started? Is the manager looking into the scan config and the KB and tell the scanner via OTP what to scan, or is the scanner looking for itself? Yes, the first one. Manager gets the list of NVTs from the config (in the db) and sends the

Re: [Openvas-discuss] Migrate Database to other server

2014-07-31 Thread Matthew Mundell
i want to switch to an other server with all the configurations, users, scans, reports and so on... Is it enough to just copy var/lib/openvas/mgr/tasks.db to the other server? Or what else do i have to do? If you uploaded report formats then also copy

Re: [Openvas-discuss] Time Zone

2014-07-29 Thread Matthew Mundell
The system time is GMT-3, but reports / schedules are using UTC. (3hs delta). Any idea? There is a per-user timezone setting. In GSA it's on the My Settings page. With OMP use MODIFY_SETTING to change it. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG

Re: [Openvas-discuss] Blank database.

2014-07-16 Thread Matthew Mundell
Hi all. Anybody knows how to blank the openvas 6 (tasks.db) database to start scanning history from zero without re installing openvas?  Any script or tip will be appreciated.  Stop Manager. rm PREFIX/var/lib/openvas/mgr/tasks.db rm -rf PREFIX/share/openvas/openvasmd/report_formats Restart

Re: [Openvas-discuss] reports

2014-07-14 Thread Matthew Mundell
Apologies up front if I'm asking a ridiculous question... Are reports generated on the fly? If not is there any way to download for all executed tasks without having to use the web ui? Yes, on the fly. You can use OMP to access the reports without GSA. http://openvas.org/protocol-doc.html

Re: [Openvas-discuss] openvas web ui keeps crashing

2014-07-13 Thread Matthew Mundell
Thanks.. so where do I disable logs? I been looking and can't find it.. Should work to replace 128 with 0 in PREFIX/etc/openvas/gsad_log.conf. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver

Re: [Openvas-discuss] No ldap library found

2014-07-02 Thread Matthew Mundell
Do you have the -dev package installed too? On Debian it's libldap2-dev I think. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner ___

Re: [Openvas-discuss] openvas-cli:Error in uploading file through modify_config

2014-06-24 Thread Matthew Mundell
I want to replace the nmap grepaable file in NMAP ( NASL Wrapper). Here is the code which i tried: omp --config-file=auth.xml --xml=' modify_config config_id=47852b54-8294-4adf-83a8-db1c34cc5db3 preference nvt oid=1.3.6.1.4.1.25623.1.0.14259/ nameNmap (NASL wrapper):File containing

Re: [Openvas-discuss] restarting of the computer running openvas

2014-06-23 Thread Matthew Mundell
If the computer on which Openvas is running gets restarted/rebooted, would running scans resume? Or simply run at the next scheduled time? Thanks in advance... They would not resume. All tasks stop when Manager is stopped. But yes they would run at the next scheduled time. -- Greenbone

Re: [Openvas-discuss] OpenVAS-7 - CentOS 6.5 64-bit - Installation Issue::

2014-06-19 Thread Matthew Mundell
install his own pakcage a single time and is hence an idiot by definition Trolling. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner ___

Re: [Openvas-discuss] SQL_giveup error

2014-06-05 Thread Matthew Mundell
Does openvasmd run nested transaction against sqlite3 when you run a clustered scan? openvasmd is not supposed to run nested transactions. Is your slave the same openvasmd as your master? I'm not sure if that will work. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany |

Re: [Openvas-discuss] too little inodes for NVTs and invalid cross device link

2014-05-21 Thread Matthew Mundell
Now when i try to delete a report-format i get an error. I had the same problem on another server but didn�t know where it comes from. md main:WARNING:2014-04-28 12h48.34 UTC:57484: delete_report_format: rename

Re: [Openvas-discuss] 'gsad' 5 terminates when running scan on OpenVAS 7

2014-05-12 Thread Matthew Mundell
*(process:4862): GLib-CRITICAL (recursed) **: g_string_erase: assertion `pos + len = string-len' failedAborted (core dumped)* Looks like the thread problem with the logging, disable GSA logging to prevent it from happening. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany

Re: [Openvas-discuss] Authentication configuration not found

2014-05-05 Thread Matthew Mundell
During configuration process and after start scanner, make the certificates, download the NVTs ... an error occurs when the openvasmd --create-user is executed. The return is Aborted and the log message (.../openvas/var/log/openvas/openvasmd.log) is: lib auth: INFO:2014-05-03 02h14.08

Re: [Openvas-discuss] Restoring an OpenVAS Instance

2014-05-05 Thread Matthew Mundell
Bump? No more ideas? Do the Manager logs for the create_task give any clue? Perhaps there's an error logged there. -G On 2014-04-30 15:00, G Galitz wrote: On 2014-04-29 19:29, Matthew Mundell wrote: Hmm.. the UUIDs do seem to still match up, but the tasks are still missing

Re: [Openvas-discuss] Restoring an OpenVAS Instance

2014-04-29 Thread Matthew Mundell
To make a long story short, recently I had to restore my tasks.db on an existing OpenVAS server. Everything is working ok except the old tasks and reports are not visible in the GSA. The targets and scan configs are all there, but not the tasks and reports. All I did was restore via

Re: [Openvas-discuss] Restoring an OpenVAS Instance

2014-04-29 Thread Matthew Mundell
Coolio. The users are LDAP, but I suppose that is not directly relevant. I'll check the UUIDs as you and Jan indicate. LDAP users are in var/lib/openvas/users-remote/ldap or var/lib/openvas/users-remote/ldap_connect, by the way. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck,

Re: [Openvas-discuss] Openvas v7 public release

2014-04-23 Thread Matthew Mundell
Does anyone know when is the estimated date for final release of the new version of OpenVas? Soon. Probably sometime this week. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner

Re: [Openvas-discuss] updating plugins

2014-04-16 Thread Matthew Mundell
I have been having a strangely hard time finding solid answers online to a pretty simple question: what is the proper way to fully update the NVTs in an OpenVAS installation? That is, I'm running openvas-nvt-sync, but it sounds like you're supposed to run openvasmd --update or openvasmd

Re: [Openvas-discuss] Slave requirements

2014-04-15 Thread Matthew Mundell
I know the minimum requirements to run an OpenVAS system as a Slave are openvas-libraries, openvas-scanner and openvas-manager, but what about the NVTs? Are they grabbed on the Slave system that executes the tasks, or from the Master system that holds the tasks but advises the Slave to run

Re: [Openvas-discuss] Report format issue

2014-02-19 Thread Matthew Mundell
I'm about at the end of my knowledge and am sure I'm missing something right in front of my face while trying to set up a new report format. I have set up keys on our Openvas server (as per http://www.openvas.org/trusted-nvts.html) created a new report format, grabbed the

Re: [Openvas-discuss] How to import exportet tasks?

2014-02-03 Thread Matthew Mundell
I am wondering how I can import an exported task from another OpenVAS server or another user profile? I can see the export buttons, which will provide me with an XML file, but I haven't figured out yet, how to import them back into the system. Directly importing the Task export XML is not

Re: [Openvas-discuss] report order

2014-02-03 Thread Matthew Mundell
Is there any way to sort a report by vulnerability instead of host? I've looked everywhere, and checked Google. 'Order of results: by host' suggests there are other sorts, but I can't seem to find them... Sorting by Vulnerability was introduced in Manager 5.0+beta3, so it will be in OpenVAS

Re: [Openvas-discuss] Report migration

2014-01-30 Thread Matthew Mundell
In GSA Create a Container Task at the bottom on the New Task page. You can import a report as you create the task, and you can import more later on the Task Details page. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas

Re: [Openvas-discuss] OpenVAS Slave

2014-01-06 Thread Matthew Mundell
Is there something I can do to test the connection and validate that the slave is working properly? You could turn on logging and check how far the Master and Slave are getting. Also check that the port, password, etc for the Slave are correct on the Master. -- Greenbone Networks GmbH Neuer

Re: [Openvas-discuss] CVSS Risk Factor Limits

2013-12-05 Thread Matthew Mundell
Is there a way to change the OpenVAS risk limits to reflect what our security assessor expects to see i.e. Low is 0.0 to 3.9, Medium is 4.0 to 6.9 and High is 7.0 to 10.0. In trunk there is the Severity Class setting (Extras My Settings in GSA). The class NVD Vulnerability Severity Ratings

Re: [Openvas-discuss] CVSS Risk Factor Limits

2013-12-05 Thread Matthew Mundell
I don't have such a setting in my installation - in Extras My Settings I only have the following: Probably because you are running OpenVAS 6. The new setting has been added recently. Looks like it first appeared in the OpenVAS 7 beta1 release (gsa 5.0). OpenVAS 7 will likely come out in the

Re: [Openvas-discuss] The remote host (172...) is dead when run Task

2013-12-01 Thread Matthew Mundell
Where is portscanners? How can I config that? I installed OpenVAS on RHEL 6. In GSA edit the config. Look for the Port Scanners family. Ping Host is in there. You may have to clone the config before you can edit it. Just press the clone button (looks like a sheep). -- Greenbone Networks

Re: [Openvas-discuss] openvasmd segmentation fault

2013-11-27 Thread Matthew Mundell
2013/9/23 Matthew Mundell matthew.mund...@greenbone.net: just compiled from SVN r17733. But running openvasmd gives me a segmentation fault, even after starting with a fresh tasks.db: I would suspect r17732, but I tried a --rebuild (with r17733) and it works OK, even if I remove the db

Re: [Openvas-discuss] Integrate various tasks in one report

2013-11-20 Thread Matthew Mundell
There is any way of integrate the results of various tasks in one report? For example, you configure and run two tasks that use different slaves to launch the tests, and you download one unique report with all the results.I don't mean a differential report but joint report. I could do this

Re: [Openvas-discuss] greenbone assistance and openvas

2013-11-15 Thread Matthew Mundell
Kiryl, please say what version of OpenVAS you have installed, and give some details about the values you used for the new target. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner

Re: [Openvas-discuss] Openvas on Kali

2013-11-11 Thread Matthew Mundell
How can I change it? How can I manually delete it? Like going to a certain folder / directory and delete a file? The schedule is still considered in use if there's a task in the trashcan using the schedule. Perhaps that's the cause? Trashcan is in the Extras menu on GSA. -- Greenbone

Re: [Openvas-discuss] specify TLS ciphers for gsad

2013-11-10 Thread Matthew Mundell
is there a way to enforce PFS-ciphers in GSAD a wild guess in /etc/sysconfig/gsad doe snot work GSA_SSL_CIPHERS=TLS_DHE_RSA_AES_256_CBC_SHA1 The only way would be to modify the source, I think. GSA does not pass any cipher argument to MHD_start_daemon. -- Greenbone Networks GmbH Neuer

Re: [Openvas-discuss] please help me

2013-11-06 Thread Matthew Mundell
I am a new one using the openvas. I get a erro when I run the openvasmd .This is the log ,but I have no idea about this. md main:MESSAGE:2013-11-06 08h30.14 utc:4282: init_manage: database version of database: 99 md main:MESSAGE:2013-11-06 08h30.14 utc:4282: init_manage: database version

Re: [Openvas-discuss] Change report format with OMP (NBE to XML)

2013-10-28 Thread Matthew Mundell
Hey guys, Can anybody tell me how do I change a report output format with OMP? I have .nbe and need .xml. I did it already just cannot remember how. It's the format_id attribute of the get_reports command. To list all format ID's you can use omp --get-report-formats.

Re: [Openvas-discuss] Bogus Element: next

2013-10-21 Thread Matthew Mundell
We're running a new install of the latest OpenVAS 6. Upon editing an existing alert (changing the attached report type) and clicking Save, we get this error: Operation:Save Alert Status code: 400 Status message: Bogus element: next This occurs with any existing alert and

Re: [Openvas-discuss] Editing default Openvas emails

2013-10-11 Thread Matthew Mundell
We have the latest Openvas 6 release installed and are looking to change the default text and subject in the emails that get sent out after job is complete. Is there a way to do this from within the GSA GUI, or by editing text/template files instead? No. The only way to do this is to change

Re: [Openvas-discuss] Disable udp scans

2013-09-26 Thread Matthew Mundell
In the create_target omp command I can define a port range. Can I also define the type of ports (TCP or UDP ) which should be scanned in the create_target command without the need to create a port list and the port ranges for it? Thanks for any input. Yes, syntax for PORT_RANGE element is

Re: [Openvas-discuss] openvasmd segmentation fault

2013-09-23 Thread Matthew Mundell
just compiled from SVN r17733. But running openvasmd gives me a segmentation fault, even after starting with a fresh tasks.db: I would suspect r17732, but I tried a --rebuild (with r17733) and it works OK, even if I remove the db. Any chance you could run the rebuild under gdb and post a

Re: [Openvas-discuss] get_configs doesn't deliver task nodes

2013-07-29 Thread Matthew Mundell
We are in the middle of upgrading OpenVAS to version 6. When I run the following omp command get_configs/ The tasks node is not included anymore in the response as it was in OpenVAS 5. In the documentation http://www.openvas.org/omp-4-0.html#command_get_configs it is also mentioned

Re: [Openvas-discuss] get_nvt invalid XML?

2013-06-21 Thread Matthew Mundell
[root@openvas ~]# openvasmd --version OpenVAS Manager 3.0.5 Manager DB revision 56 Copyright (C) 2010 Greenbone Networks GmbH License GPLv2+: GNU GPL version 2 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law.

Re: [Openvas-discuss] get_nvt invalid XML?

2013-06-20 Thread Matthew Mundell
Hi, I have discovered that, using mono at least, I am not able to parse the get_nvt api call properly due to ampersands in the XML returned that are not XML entities. Two examples are the following URL's: URL:http://svn.apache.org/viewvc?view=revisionrevision=1476592

Re: [Openvas-discuss] location of scan status/progress in tasks,db

2013-06-14 Thread Matthew Mundell
Where is the scan status/progress percentage stored in tasks.db? I tried looking through all tables but can's seem to locate it. It's also calculated every time. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas

Re: [Openvas-discuss] Trend calculation

2013-06-11 Thread Matthew Mundell
The GSA Help page Tasks describes the trend icon. The trend is calculated each time. For the exact calculation see task_trend_calc in manage_sql.c. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr.

Re: [Openvas-discuss] PDF report from command line with no log findings

2013-06-06 Thread Matthew Mundell
I am able to create a PDF report from command line as follows: #omp -h 127.0.0.1 -p 9390 --username user -w * --get-report 7af83de8-6d99-4b9c-a6b4-da635482cd31 --format c402cc3e-b531-11e1-9163-406186ea4fc5 report.pdf It includes all findings in the PDF report. Is there a way to create

Re: [Openvas-discuss] openvasmd --first-user default password change

2013-05-31 Thread Matthew Mundell
Initially the manager reports with 'failed to create user'. I checked the log and found that it was missing password policy. So I downloaded the openvas-administrator in trunk and copy the pwpolicy.conf file into the system. Then I ran above command again, and this time it creates

Re: [Openvas-discuss] task configuration reset when editing

2013-05-31 Thread Matthew Mundell
Yesterday I tried to edit a task and i noticed that when you click on the edit button the target and the scan configured are reseted to localhost and empty respectively. Is this a desired behavior or is it a bug? I can not reproduce this behaviour. Can anyone? This sounds like the issue

Re: [Openvas-discuss] conection has timed out on webinterface

2013-05-30 Thread Matthew Mundell
regarding this, I was doing some more tests this morning and, after having to reboot the server, I restarted OpenVAS. When I try to access the web interface, I get now this message: (process:4407): GLib-CRITICAL (recursed) **: g_string_erase: assertion `pos + len = string-len' failed Did

Re: [Openvas-discuss] Change the attachment size on reports in openvas6

2013-05-29 Thread Matthew Mundell
I have been asked to modify the report attachment size from 1MB to 50Mb. Is this possible or recommended? If so, can someone tell me how to do it? I am running openvas6 The value is hardcoded in openvas-manager (src/manage_sql.c definition MAX_ATTACH_LENGTH) so the only way to do this is to

Re: [Openvas-discuss] Openvas active directory credentials

2013-05-04 Thread Matthew Mundell
How do you setup openvas to use the username and password on AD as login so I can check my local security on windows machine? In GSA create a credential with the SMB username and password, then create a target using that credential, then create a task using that target. -- Greenbone Networks

Re: [Openvas-discuss] slave scan with credentials - internal error

2013-04-22 Thread Matthew Mundell
Anyone? Sounds familiar. Which OpenVAS? Have you tried with the recently released OpenVAS-6? -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner

Re: [Openvas-discuss] openvas backup failed

2013-04-17 Thread Matthew Mundell
But I don't get any other message that could give me any clue about why is it failing. Also, how do I load the backup on OpenVAS? Would it work if, for example, I do a backup of Openvas5, I delete it and, then, load the backup on a clean OpenVas6 install? If not, any recommended way of

Re: [Openvas-discuss] port list defaults to openvas

2013-04-17 Thread Matthew Mundell
I have realized that whenever I try to create a target and specify a port list (such as all IANA TCP and UDP ports), the next time I login I realize the port list is changed to Openvas Default Is there any reason behind this? At least in trunk this is working, which means in OpenVAS-6 it is

Re: [Openvas-discuss] openvas backup failed

2013-04-17 Thread Matthew Mundell
Thanks for the answer Matthew. Does it work too when copying it to a new OpenVAS version or to clone the database on another server? Actually I forgot one aspect here. Some of the Manager data is stored on disk. So these directories should also be backed up.

Re: [Openvas-discuss] configuration for email escalator

2013-04-15 Thread Matthew Mundell
I've been doing test with escalators and I've seen that I can't get the email escalator to work. The idea is to have it sending emails using an external SMTP server but I don't see on openVAS any way to specify this. Does anybody have any idea about it or can point me to any documentation

Re: [Openvas-discuss] openvas migration

2013-04-08 Thread Matthew Mundell
I'm checking the procedure to migrate my openvas5 installation to openvas6 and I was wondering if there's any way to move all my tasks from one to the other easily or if I need to create all them again after the migration process. If you're talking about running openvasmd --migrate, then the

Re: [Openvas-discuss] openvasmd segfaulting under OpenBSD

2013-04-03 Thread Matthew Mundell
Thanks Rodolfo. I changed that line to field = g_convert (compressed, strlen (compressed), in trunk r15908, and backported it to OpenVAS-6 in r15910. Let me know if that works for you. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460

Re: [Openvas-discuss] OMP get schedules question

2013-03-26 Thread Matthew Mundell
I'm working with OMP and I have a question about the get_schedules XML syntax. I know that if I want to get all schedules the XML needed is just: get_schedules/ and I'll get a list. My question is if the get_schedules details=1/ should work or if I need, necessarily, to tell for which ID do I

Re: [Openvas-discuss] [Openvas-plugins] Performing local security checks with OpenVAS 5 from Backtrack 5 r3

2013-03-19 Thread Matthew Mundell
I'm using OMP. Means I've need to set them on the config...would you mind to tell me exactly which settings I need to change in which group? Thanks!! You need to create credentials and set them on the Target actually. This is what GSA does. See the SSH_LSC_CREDENTIAL and SMB_LSC_CREDENTIAL

Re: [Openvas-discuss] Update manager when scan and manager running, effects ?

2013-03-18 Thread Matthew Mundell
i always shutdown manager to do a manager --update after getting new nvt, and restarting scanner but what can be the effect of running an openvas-manager update ? while manager running, and scan in progress ? The scan should stay the same, because the Manager has already requested the scan

Re: [Openvas-discuss] confused about modify_task

2013-03-11 Thread Matthew Mundell
I receive a result in verbose mode which tells me that there are no errors but parameters are missing? Looks like there's an error in the parameter check for MODIFY_TASK. Add one of the other fields, like name or comment, and it should work. -- Greenbone Networks GmbH Neuer Graben 17, 49074

Re: [Openvas-discuss] Reporting issue

2013-03-09 Thread Matthew Mundell
So my report is list but when I try to export a report using this format it: # omp -R 36d266e8-d492-4204-9a1b-b2e6c0e97eb2 -f 2381d87c-7106-11e2-8098-001f29eadec8 Failed to get report. --- Try adding -v to the command to see if it will give more information about the

Re: [Openvas-discuss] question about openvas manager and reports

2013-02-13 Thread Matthew Mundell
I am using OpenVAS 5 with CentOS 6 64 bit and the Atomic repository. I am scanning a /19 subnet, so I have 2 scan target ranges since by default OpenVAS does not allow ranges larger then 8192(approx.). My question is if there is a possibility to export the results so I can import them in

Re: [Openvas-discuss] question about exporting reports to XML file command line

2013-02-13 Thread Matthew Mundell
We also want to export only the HIGH and MEDIUM issues to make the result set smaller. We are now doing it as follows: omp -u *user* -w *password* -R 60f1d5a4-b466-434a-8e84-bc4f2db0ab13 -f c402cc3e-b531-11e1-9163-406186ea4fc5 How can we specify this to only export MEDIUM and HIGH and not

Re: [Openvas-discuss] Change scheduled scans with scan profiles

2013-02-08 Thread Matthew Mundell
My question: how can I change the scheduled scans to use profile Y instead of profile X and don't lose the results? In recent versions you can edit the task to change the schedule. Click the edit icon in the task list actions column. -- Greenbone Networks GmbH Neuer Graben 17, 49074

  1   2   3   4   5   >