Re: [Openvas-discuss] SSH authenticated scan fails

[Christian Fischer]

Hi,

On 23.01.2018 08:07, Ghislain Lévêque wrote:

> Jan 11 17:04:33 webapps-01 sshd[6148]: debug1: Client protocol version
2.0; client software version OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

it seems that your scanning machine is at Ubuntu 14.04 or earlier?

> Could anyone point me to the right direction to debug this problem ?

Depending on the OpenSSH configuration (host key types, algorithms etc.)
 of the target it might be required that you're upgrading the libssh*
packages to a version > 0.7.0 and to rebuild the OpenVAS installation
against this newer libssh packages.

Regards,

--

Christian Fischer | PGP Key: 0x54F3CE5B76C597AD
Greenbone Networks GmbH | http://greenbone.net
Neumarkt 12, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] Scan Duration

[Christian Fischer]

Hi,

On 23.01.2018 08:49, Helmut Koers wrote:
> Dear all,
> we are having a couple of regular repeating scans and have recognized that 
> all scan durations have more than doubled starting in December 2017.
> 
> Can anyone confirm to see that behavior as well?

if this is OpenVAS 9 then it could be possible that this is caused by a
bug in the plugin scheduler of the scanner. This specific bug got fixed
in the openvas-scanner-5.1 branch last year but is not released yet in a
new OpenVAS 9 release.

> May that be related to the number and/or kind of NVTs that have been added 
> ever since?

The bug might be triggered sooner or later by any new NVT added to the
feed which moves the "dependency chain" of NVTs to execute some of them
earlier or later. Depending on the exposed services on the target it
might be also possible that it isn't triggered at all.

Regards,

--

Christian Fischer | PGP Key: 0x54F3CE5B76C597AD
Greenbone Networks GmbH | http://greenbone.net
Neumarkt 12, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner

___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] Options for support?

[Björn Ricks]

We offer a virtual appliance called GSM One. Please take a look at 
https://www.greenbone.net/en/gsm-one/


Am 26.01.2018 um 22:12 schrieb Scott Knauss:

Have you given any thought towards supporting a virtual appliance?

On Wed, Jan 24, 2018 at 8:27 AM, Jan-Oliver Wagner 
> wrote:


Am Montag, 22. Januar 2018, 19:57:40 schrieb Trent Townsend:
>   What are the options for purchasing the Greenbone support but not an
> appliance?  I've on the Greenbone website but the Buy Here link takes you
> to a list of other websites where I'm unable to find exactly what I need.
> I want to run the code on my system but have access to Greenbone support
> and feeds.

there is indeed no option to purchase Greenbone Support or the
Greenbone Security Feed without a GSM appliance.

We did so in the past but supporting problems on arbitrarily compiled
modules on arbitrary platforms was too ambitious. Additionally
we were not able to guarantee that all NVTs of the feed would work
on all the systems. Discussions with customers became endless.
So, we stopped that product in favour of supporting a range of
well-defined environments which is way easier to maintain and support.

--
Dr. Jan-Oliver Wagner | +49-541-760278-0   |
http://www.greenbone.net/
Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG
Osnabrück, HR B
202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org

https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss





___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss


___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss