Re: [Openvas-discuss] debian 8 and openvas pdf generation?

2015-09-21 Thread Brandon Perry
While I can’t say the exact libs that are required, here is the dpkg -l 
printout of the openvas debian appliance (v8).

I expect the poppler and ghostscript libs are what are used.

Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name   Version Architecture 
Description
+++-==-===--===
ii  acl2.2.52-2amd64
Access control list utilities
ii  acpi   1.7-1   amd64
displays information on ACPI devices
ii  acpi-support-base  0.142-6 all  
scripts for handling base ACPI events such as the power button
ii  acpid  1:2.0.23-2  amd64
Advanced Configuration and Power Interface event daemon
ii  adduser3.113+nmu3  all  add 
and remove users and groups
ii  apt1.0.9.8 amd64
commandline package manager
ii  apt-utils  1.0.9.8 amd64
package management related utility programs
ii  base-files 8   amd64
Debian base system miscellaneous files
ii  base-passwd3.5.37  amd64
Debian base system master password and group files
ii  bash   4.3-11+b1   amd64GNU 
Bourne Again SHell
ii  binutils   2.25-5  amd64GNU 
assembler, linker and binary utilities
ii  binutils-mingw-w64-i6862.25-5+5.2  amd64
Cross-binutils for Win32 (x86) using MinGW-w64
ii  binutils-mingw-w64-x86-64  2.25-5+5.2  amd64
Cross-binutils for Win64 (x64) using MinGW-w64
ii  bison  2:3.0.2.dfsg-2  amd64
YACC-compatible parser generator
ii  bsdmainutils   9.0.6   amd64
collection of more utilities from FreeBSD
ii  bsdutils   1:2.25.2-6  amd64
basic utilities from 4.4BSD-Lite
ii  build-essential11.7amd64
Informational list of build-essential packages
ii  busybox1:1.22.0-9+deb8u1   amd64
Tiny utilities for small and embedded systems
ii  bzip2  1.0.6-7+b3  amd64
high-quality block-sorting file compressor - utilities
ii  cmake  3.0.2-1 amd64
cross-platform, open-source make system
ii  cmake-data 3.0.2-1 all  
CMake data files (modules, templates and documentation)
ii  comerr-dev 2.1-1.42.12-1.1 amd64
common error description library - headers and static libraries
ii  console-setup  1.123   all  
console font and keymap setup program
ii  console-setup-linux1.123   all  
Linux specific part of console-setup
ii  coreutils  8.23-4  amd64GNU 
core utilities
ii  cpio   2.11+dfsg-4.1   amd64GNU 
cpio -- a program to manage archives of files
ii  cpp4:4.9.2-2   amd64GNU 
C preprocessor (cpp)
ii  cpp-4.94.9.2-10amd64GNU 
C preprocessor
ii  cron   3.0pl1-127  amd64
process scheduling daemon
ii  dash   0.5.7-4+b1  amd64
POSIX-compliant shell
ii  debconf1.5.56  all  
Debian configuration management system
ii  debconf-i18n   1.5.56  all  
full internationalization support for debconf
ii  debian-archive-keyring 2014.3  all  
GnuPG archive keys of the Debian archive
ii  debianutils4.4+b1  amd64
Miscellaneous utilities specific to Debian
ii  diffutils  1:3.3-1+b1  amd64
File comparison utilities
ii  discover   2.1.2-7 amd64
hardware identification system
ii  discover-data  2.2013.01.11all  
Data lists for Discover hardware detection system
ii  dmeventd   2:1.02.90-2.2   amd64  

[Openvas-discuss] (no subject)

2015-09-21 Thread Coulibaly Ismael Hassan
-- 
*COULIBALY Ismaël Hassan *
*Elève ingénieur à l' Institut National des Postes et Télécommunications *
*Filière:Informatique*
openvas-check-setup 2.3.0
  Mode:  desktop
  Date:  Sun, 20 Sep 2015 23:55:25 -0400

Checking for old OpenVAS Scanner <= 2.0 ...
/usr/bin/openvas-check-setup: 172: /usr/bin/openvas-check-setup: openvasd: not found

Checking presence of OpenVAS Scanner ...
OpenVAS Scanner 5.0.1
Most new code since 2005: (C) 2015 Greenbone Networks GmbH
Nessus origin: (C) 2004 Renaud Deraison 
License GPLv2: GNU GPL version 2
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.


Checking OpenVAS Scanner version ...

OK: OpenVAS Scanner is present in version 5.0.1.
plugins_folder = /var/lib/openvas/plugins
cache_folder = /var/cache/openvas
include_folders = /var/lib/openvas/plugins
max_hosts = 30
max_checks = 10
be_nice = no
logfile = /var/log/openvas/openvassd.messages
log_whole_attack = no
log_plugins_name_at_load = no
dumpfile = /var/log/openvas/openvassd.dump
cgi_path = /cgi-bin:/scripts
optimize_test = yes
checks_read_timeout = 5
network_scan = no
non_simult_ports = 139, 445
plugins_timeout = 320
safe_checks = yes
auto_enable_dependencies = yes
use_mac_addr = no
nasl_no_signature_check = yes
drop_privileges = no
unscanned_closed = yes
unscanned_closed_udp = yes
vhosts = 
vhosts_ip = 
report_host_details = yes
cert_file = /var/lib/openvas/CA/servercert.pem
key_file = /var/lib/openvas/private/CA/serverkey.pem
ca_file = /var/lib/openvas/CA/cacert.pem
kb_location = /var/lib/redis/redis.sock
config_file = /etc/openvas/openvassd.conf
Checking OpenVAS Scanner CA cert ...

OK: OpenVAS Scanner CA Certificate is present as /var/lib/openvas/CA/cacert.pem.
Checking OpenVAS Manager server certificate ...
OK: OpenVAS Scanner server certificate is valid and present as /var/lib/openvas/CA/servercert.pem.

Checking NVT collection ...

OK: NVT collection in /var/lib/openvas/plugins contains 41154 NVTs.
Checking status of signature checking in OpenVAS Scanner ...
WARNING: Signature checking of NVTs is not enabled in OpenVAS Scanner.
SUGGEST: Enable signature checking (see http://www.openvas.org/trusted-nvts.html).

OK: The NVT cache in /var/cache/openvas contains 41154 files for 41154 NVTs.

Checking presence of redis ...
OK: redis-server is present in version v=2.8.17.

Checking if redis-server is configured properly to run with openVAS ...
OK: scanner (kb_location setting) is configured properly using the redis-server socket: /var/lib/redis/redis.sock
Checking if redis-server is running ...
OK: redis-server is running and listening on socket: /var/lib/redis/redis.sock.
OK: redis-server configuration is OK and redis-server is running.

Checking presence of OpenVAS Manager ...
OpenVAS Manager 6.0.1
Manager DB revision 146
Copyright (C) 2010-2015 Greenbone Networks GmbH
License GPLv2+: GNU GPL version 2 or later
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.



OK: OpenVAS Manager is present in version 6.0.1.
Checking OpenVAS Manager client certificate ...
OK: OpenVAS Manager client certificate is valid and present as /var/lib/openvas/CA/clientcert.pem.

Checking OpenVAS Manager database ...

OK: OpenVAS Manager database found in /var/lib/openvas/mgr/tasks.db.
Checking access rights of OpenVAS Manager database ...

OK: Access rights for the OpenVAS Manager database are correct.
Checking if users exist ...
OK: At least one user exists.

Checking sqlite3 presence ...
OK: sqlite3 found, extended checks of the OpenVAS Manager installation enabled.

Checking OpenVAS Manager database revision ...
OK: OpenVAS Manager database is at revision 146.
Checking database revision expected by OpenVAS Manager ...
OK: OpenVAS Manager expects database at revision 146.
OK: Database schema is up to date.
Checking OpenVAS Manager database (NVT data) ...
OK: OpenVAS Manager database contains information about 41154 NVTs.
Checking OpenVAS SCAP database ...
ERROR: No OpenVAS SCAP database found. (Tried: /var/lib/openvas/scap-data/scap.db)
FIX: Run a SCAP synchronization script like openvas-scapdata-sync or greenbone-scapdata-sync.
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] OpenVAS supplement?

2015-09-21 Thread Chris
Hi,
 
> How do you configure it to do both?
 
the Vulnerability-Scan is included in configs like "Full and Fast". More infos 
about it can be found here for example:

http://docs.greenbone.net/

and is catching known vulnerabilities. For the policy task have a look at:

http://greenbone.net/learningcenter/task_it_grundschutz.html

for example.
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] No OpenVAS SCAP database found

2015-09-21 Thread Eero Volotinen
How about reading error message(s)

*FIX: Run a SCAP synchronization script like openvas-scapdata-sync *

*Eero*

2015-09-21 3:02 GMT+03:00 Coulibaly Ismael Hassan :

> I work on kali linux 2.0
> Please can help me fix this problem:
>
>
> *ERROR: No OpenVAS SCAP database found. (Tried:
> /var/lib/openvas/scap-data/scap.db)FIX: Run a SCAP synchronization
> script like openvas-scapdata-sync or greenbone-scapdata-sync.*
>
> the .log file is below.
>
> --
> *COULIBALY Ismaël Hassan *
> *Elève ingénieur à l' Institut National des Postes et Télécommunications *
> *Filière:Informatique*
>
> ___
> Openvas-discuss mailing list
> Openvas-discuss@wald.intevation.org
> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
>
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] No OpenVAS SCAP database found

2015-09-21 Thread Eero Volotinen
Well, then your should talk to firewall admin to allow outgoing rsync to
that port.

Eero
21.9.2015 2.15 ip. "Coulibaly Ismael Hassan" 
kirjoitti:

> I done it but while the process I obtained some errors like:
>
>
>
> *Configured SCAP data rsync feed:
> rsync://feed.openvas.org:/scap-datarsync: failed to connect to
> feed.openvas.org  (78.47.251.61): Connection timed
> out (110)rsync error: error in socket IO (code 10) at clientserver.c(128)
> [Receiver=3.1.1][e] Error: rsync failed. Your SCAP data might be broken
> now.*
>
>
> 2015-09-21 2:18 GMT-04:00 Eero Volotinen :
>
>> How about reading error message(s)
>>
>> *FIX: Run a SCAP synchronization script like openvas-scapdata-sync *
>>
>> *Eero*
>>
>> 2015-09-21 3:02 GMT+03:00 Coulibaly Ismael Hassan <
>> cismaelhas...@gmail.com>:
>>
>>> I work on kali linux 2.0
>>> Please can help me fix this problem:
>>>
>>>
>>> *ERROR: No OpenVAS SCAP database found. (Tried:
>>> /var/lib/openvas/scap-data/scap.db)FIX: Run a SCAP synchronization
>>> script like openvas-scapdata-sync or greenbone-scapdata-sync.*
>>>
>>> the .log file is below.
>>>
>>> --
>>> *COULIBALY Ismaël Hassan *
>>> *Elève ingénieur à l' Institut National des Postes et
>>> Télécommunications *
>>> *Filière:Informatique*
>>>
>>> ___
>>> Openvas-discuss mailing list
>>> Openvas-discuss@wald.intevation.org
>>>
>>> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
>>>
>>
>>
>
>
> --
> *COULIBALY Ismaël Hassan *
> *Elève ingénieur à l' Institut National des Postes et Télécommunications *
> *Filière:Informatique*
>
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

[Openvas-discuss] GASD on tcp/ip dual stack machines?

2015-09-21 Thread Eero Volotinen
Hi,

Noticed that on dual stack ipv4/6 machines gsad by default listens only
ipv6, not ipv4?

Is this bug or feature?

--
Eero
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss