[Openvas-discuss] Adding overrides per IP (not per NVT)

[Piotr Kubaj]

Hi,

My problem is that I have over 12000 IP's to scan. I've added them to targets 
in two /20's, a /21 and two /22's. But I need to disable scanning (or add 
overrides to false positives) to some IP's (I need to disable all NVT's for 
them). Is that possible? Disabling numerous NVT's for numerous IP's means 
adding literally thousands of overrides.

--
___ 
/ There seems no plan because it is all \

| plan. |
|   |
\ -- C. S. Lewis/
--- 
   \   ^__^

\  (oo)\___
   (__)\   )\/\
   ||w |
   || ||


signature.asc
Description: PGP signature
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] NFS Vulnerability issue

[Reindl Harald]

Am 13.12.2017 um 19:18 schrieb amit:
Can anyone please help me finding the nfs vulnerability , my OpenVAS is 
working perfectly, all the plugins are loaded.


its CentOS , i have stopped the  iptables  ,,, but then also not able to 
capture any vulnerability ,,, nfs is installed ...

http://www.catb.org/esr/faqs/smart-questions.html
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] Reporting on delta's between scans on same host

[tatooin]

On Fri, 2017-12-15 at 11:14 +0100, Christian Fischer wrote:
> Hi,
> 
> On 15.12.2017 10:58, tatooin wrote:
> > 
> > HiOn Thu, 2017-12-14 at 19:05 +0100, Christian Fischer wrote:
> > > 
> > > Hi,
> > > 
> > > On 14.12.2017 18:36, tatooin wrote:
> > > > 
> > > > 
> > > > However, that still doesn't explain why such an important
> > > > native
> > > > feature
> > > > of OpenVAS just don't work.  
> > > have you considered that a explanation for this cloud be that
> > > there
> > > might be no support for delta reports implemented for CSV
> > > reports?
> > > 
> > > So it might be just a "is not supported/implemented" rather then
> > > a
> > > "don't work".
> > That's possible, indeed. But the documentation doesn't mention any
> > exclusion; I would assume that if this feature is documented
> > without
> > any exclusion, then it's suppose to work whatever format natively
> > supported by OpenVAS. 
> > Now if delta reports isn't supported by csv then discussion is
> > closed;
> > this should just be highlighted in the documentation to avoid
> > bothering
> > the openvas community uselessly. 
> a documentation about the "Delta" feature is available at:
> 
> http://docs.greenbone.net/GSM-Manual/gos-4/en/reports.html#delta-repo
> rts
> 
> which explicitly states the following:
> 
> > 
> > Subsequently you will receive the delta report. As usual, it can be
> displayed in different formats and exported as PDF.
> 
Thanks Christian. I saw that part as well, but I did not understood
that as "the only format supported is PDF". The sentence upon is highly
confusing. 
Still, is there any plan to support csv exporting in the future ?
Thanks for the clarification. 
> > 
> > Thanks !
> > 
> > > 
> > > Regards,
> > > 

> > 

> 
> 
> Regards,
> 
> 
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] Openvas Help

[Heena Thacker]

Dear Sir,

I hope all going good from your end.

I need one help from your end:

I am using omp API commands to generate report. It was working fine till 
yesterday. Suddenly today it is giving me error with "Failed to read response". 
All other API command like get_tasks, create_target works great. Only report 
generation API is giving this error. Can you please help me with this?

Thanks,
Heena Thacker


From: Heena Thacker
Sent: 22 September 2017 10:35 AM
To: Fábio Fernandes 
Cc: openvas-discuss@wald.intevation.org
Subject: Re: [Openvas-discuss] Openvas Help

Thanks for your reply. I by mistake sent this mail to python developer. But 
your reply really helped. Thank you so much :) i will check config files and 
test again.
heena thacker
Tech lead- TDG


From: Fábio Fernandes 
>
Sent: Friday, September 22, 2017 1:54:22 AM
To: Heena Thacker
Cc: 
openvas-discuss@wald.intevation.org
Subject: Re: [Openvas-discuss] Openvas Help

1. New NVT are added weekly to the feed so new vulnerabilities can be detected. 
In some scans some NVTs can fail to detect vulnerabilities because of network 
conditions, problems with a target, etc.
2. I think nobody can help you without some more information about the bug, 
daemon error and OpenVAS version.
3. Some scans can take a lot of time because of network or scan target machine 
problems. Try to understand what is happening. Check processes running at the 
time, use log_whole_attack option in the scan configs.
4. OpenVAS Manager exposes an extensive API using the OMP protocol explained in 
http://openvas.org/protocol-doc.html. I see you mailed python developers list 
there are several clients for several languages.

Fabio

No dia 20/09/2017, às 10:53, Heena Thacker 
> escreveu:

Can you help?

From: Heena Thacker
Sent: 20 September 2017 03:16 PM
To: 'mailman-develop...@python.org' 
>
Subject: Openvas Help

Dear Sir/Madam,

We need some Openvas support. There is no documentation help available. Can you 
please advise?

We have made configuration as mentioned in Openvas site and seems to be setup 
perfectly, but I need some help with these issues:


  1.  When we run scan on Openvas , everyday the same task runs, there has been 
no change in site though the severity differs.
  2.  From recent month there is bug listed on Openvas site, scan doesn't run 
somehow, its now running everyday but when I open Greenbone there is some 
daemon error, which never came before. Is there any solution for this?
  3.  Sometimes scan takes a long time , sometime stops at some %. Is there any 
reason behind that?
  4.  If there is any API from which we can fetch data quickly?


Thanks in advance,

Heena Thacker
Technical Leader - TDG
The information contained in this communication is confidential, may be 
privileged and is for the exclusive use of the above named addressee. If you 
are not the intended recipient, you are expressly prohibited from copying, 
distributing, or in any other way using any of the information contained within 
this communication. Any views or opinions expressed are solely those of the 
author and do not necessarily represent those of Turrem Data Group Limited. All 
reasonable precautions have been taken to ensure no viruses are present in this 
E-mail. Turrem Data Group Limited cannot accept responsibility for loss or 
damage arising from the use of this E-mail or attachments, we recommend that 
you subject these to your virus checking procedures prior to use. 
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

The information contained in this communication is confidential, may be 
privileged and is for the exclusive use of the above named addressee. If you 
are not the intended recipient, you are expressly prohibited from copying, 
distributing, or in any other way using any of the information contained within 
this communication. Any views or opinions expressed are solely those of the 
author and do not necessarily represent those of Turrem Data Group Limited. All 
reasonable precautions have been taken to ensure no viruses are present in this 
E-mail. Turrem Data Group Limited cannot accept responsibility for loss or 
damage arising from the use of this E-mail or attachments, we recommend that 
you subject these to your virus checking procedures prior to use. The 
information contained in this communication is confidential, may be privileged 
and is for the exclusive use of the above named addressee. If you are not the 
intended recipient, you are expressly prohibited 

Re: [Openvas-discuss] Reporting on delta's between scans on same host

[Christian Fischer]

Hi,

On 15.12.2017 10:58, tatooin wrote:
> HiOn Thu, 2017-12-14 at 19:05 +0100, Christian Fischer wrote:
>> Hi,
>>
>> On 14.12.2017 18:36, tatooin wrote:
>>>
>>> However, that still doesn't explain why such an important native
>>> feature
>>> of OpenVAS just don't work.  
>> have you considered that a explanation for this cloud be that there
>> might be no support for delta reports implemented for CSV reports?
>>
>> So it might be just a "is not supported/implemented" rather then a
>> "don't work".
> That's possible, indeed. But the documentation doesn't mention any
> exclusion; I would assume that if this feature is documented without
> any exclusion, then it's suppose to work whatever format natively
> supported by OpenVAS. 
> Now if delta reports isn't supported by csv then discussion is closed;
> this should just be highlighted in the documentation to avoid bothering
> the openvas community uselessly. 

a documentation about the "Delta" feature is available at:

http://docs.greenbone.net/GSM-Manual/gos-4/en/reports.html#delta-reports

which explicitly states the following:

> Subsequently you will receive the delta report. As usual, it can be
displayed in different formats and exported as PDF.

> Thanks !
>> Regards,

Regards,

-- 

Christian Fischer | PGP Key: 0x54F3CE5B76C597AD
Greenbone Networks GmbH | http://greenbone.net
Neumarkt 12, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] Reporting on delta's between scans on same host

[tatooin]

HiOn Thu, 2017-12-14 at 19:05 +0100, Christian Fischer wrote:
> Hi,
> 
> On 14.12.2017 18:36, tatooin wrote:
> > 
> > However, that still doesn't explain why such an important native
> > feature
> > of OpenVAS just don't work.  
> have you considered that a explanation for this cloud be that there
> might be no support for delta reports implemented for CSV reports?
> 
> So it might be just a "is not supported/implemented" rather then a
> "don't work".
That's possible, indeed. But the documentation doesn't mention any
exclusion; I would assume that if this feature is documented without
any exclusion, then it's suppose to work whatever format natively
supported by OpenVAS. 
Now if delta reports isn't supported by csv then discussion is closed;
this should just be highlighted in the documentation to avoid bothering
the openvas community uselessly. 
Thanks !
> Regards,
> 
> --
> 
> Christian Fischer | PGP Key: 0x54F3CE5B76C597AD
> Greenbone Networks GmbH | http://greenbone.net
> 
> Neumarkt 12, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460
> Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
> 
> ___
> Openvas-discuss mailing list
> 
Openvas-discuss@wald.intevation.org> 
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss