[Openvas-discuss] Discussion mailing list is now shut down. Please register to new platform.
Dear Greenbone/OpenVAS users, this is the last email to the discussion mailing list. Next, all members will be unsubscribed. If you like to continue discussions, please register here: https://community.greenbone.net/ We will NOT automatically transfer your email address to another platform. You need to sign up actively yourself. With best regards Jan -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück Geschäftsführer: Dr. Jan-Oliver Wagner | AG Osnabrück, HR B 202460 ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Migrate discussions to new platform
Hello, this is a reminder: Only 15 days to go until this mailing list is shut down. The community forum is already very active. Lets meet there! : https://community.greenbone.net Best regards Jan Am Sonntag, 16. September 2018, 00:49:59 CEST schrieb Jan-Oliver Wagner: > Dear subscribers to openvas-discuss mailing list, > > as you have surely noticed via openvas-announce we migrate the old > community infrastructure to a modern one. At the same time we bring > various groups into one community, which also means to not distinguish > anymore between developers and users. > > We will shut down the openvas-discuss mailing list by October 31st 2018. > Everyone will be unsubscribed, but the archives will remain online. > > The members of this mailing list (openvas-discuss) are welcome to join > the new community portal at > > https://community.greenbone.net/ > > The category "Source Edition" is a good home for what was discussed at > openvas-discuss. > > However, also the new github infrastructure is a place where > you can directly discuss bugs and code: > > https://github.com/greenbone > > Hope to meet you soon on one or both of these new platforms! > > Best regards > > Jan -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] Migrate discussions to new platform
Dear subscribers to openvas-discuss mailing list, as you have surely noticed via openvas-announce we migrate the old community infrastructure to a modern one. At the same time we bring various groups into one community, which also means to not distinguish anymore between developers and users. We will shut down the openvas-discuss mailing list by October 31st 2018. Everyone will be unsubscribed, but the archives will remain online. The members of this mailing list (openvas-discuss) are welcome to join the new community portal at https://community.greenbone.net/ The category "Source Edition" is a good home for what was discussed at openvas-discuss. However, also the new github infrastructure is a place where you can directly discuss bugs and code: https://github.com/greenbone Hope to meet you soon on one or both of these new platforms! Best regards Jan -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Regarding GreenBone for OPenVAS9
Hello, there are two feeds available, GCF (Greenbone Community Feed) and GSF (Greenbone Security Feed). GCF is used as default with any source code based setup and also is the default for for the GCE VM. GSF is used for commercial contracts and only for GSMs. The problem you describe very much looks like a network problem on your end. Your firewall might restrict this kind of access. In any case I recommend to talk to your network guys about it. Am Dienstag, 20. März 2018, 07:10:20 schrieb Pratti, Aditya: > I have started to use OpenVAS 9 a Centos 7 Host. I would like to confirm if > Greenbone is a requirement for using Openvas9 . Is Greenbone the only place > to get vulnerability feed for Open VAS9 or there is any other vendors to > provide Vulnerability feed for OpenVAS9 ?. When I am trying to install > OpenVAS9 on Ubuntu host ,I am getting error " rsync: failed to connect to > feed.openvas.org<https://www.youtube.com/redirect?event=comments_toke > n=QFU6YRcmYDbHfePRuHOpRwpGRkN8MTUyMTYxNjAxMUAxNTIxNTI5NjEx=http%3A%2F%2Ffe > ed.openvas.org%2F> > (2a01:13<https://www.youtube.com/watch?v=0wWVuhRon-g=73s>0:20<https://www > .youtube.com/watch?v=0wWVuhRon-g=20s>00:12<https://www.youtube.com/watch?v > =0wWVuhRon-g=12s>7::d1): Network is unreachable (101) rsync: failed to > connect to > feed.openvas.org<https://www.youtube.com/redirect?event=comments_toke > n=QFU6YRcmYDbHfePRuHOpRwpGRkN8MTUyMTYxNjAxMUAxNTIxNTI5NjEx=http%3A%2F%2Ffe > ed.openvas.org%2F> (89.146.224.58): Connection timed out (110) rsync error: > error in socket IO (code 10) at clientserver.c(128) [Receiver=3.1.1] " > while using the command `sudo greebone-scapdata-sync` .Could you please > provide a solution for my error? -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Trying to decide the right install
Am Montag, 19. März 2018, 16:31:45 schrieb Stewart Joseph: > Thanks. At least I’m making progress. Then what is the difference in the > feeds for the GSMCE and the GCE? http://www.openvas.org/vm.html indicates > that the GSMCE would use the community feeds just like the > GCE. https://www.greenbone.net/en/community-edition/ implies that the > GSMCE has the same as the GSM. Maybe I’m misreading it but they seem at > odds. Which would it have? The GCE default and the Open Source stand-alone modules both use the GCF. The feed content is identical for both setups, but a setup from source code might be missing some build configs, tools or maybe you have older system crypto libraries or alike. -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Virtual Appliance, No Configuration -> Schedule menu item
Am Donnerstag, 1. März 2018, 11:19:22 schrieb Ian Harding: > On 3/1/18 8:32 AM, Christian Fischer wrote: > > On 23.02.2018 20:52, Ian Harding wrote: > >> but I can't seem to find a couple menu items that are supposed to be > >> available > > > > maybe the feature comparison available at [1] explains why you're not > > seeing a couple menu items like Schedules in the Community Edition? > > > > [1] https://www.greenbone.net/en/community-edition/ > > It sort of does. I see there's a lot of words comparing GSM and GCE but > no real mention of any difference in the appliance. I am used to > getting a time-limited free-trial of the full system to get me to love > it and buy the full system. I think I sort of understand some of the > feature differences now. > > So if I want the full feature set I just have to buy it right? Is there > an appliance for GSM (as opposed to GCE) to get all functionalities you could build from source code or install 3rd party packages. This is combined with the GCF. The GCE has not all functionalities but can optionally be tested with GSF. For evaluating a full combination of GSF and all features, you need to contact the Greenbone Sales Team for a trial hardware appliance. -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] RADIUS Authentication not available on OpenVas9 GSA
Am Donnerstag, 22. Februar 2018, 15:01:04 schrieb Christiaan De Vries: > Thanks for the reply... I've installed OpenVAS using the default available > packages, would that make a difference? there is no such thing like default packages. It is all 3rd party. Please contact the authors of the packages about the radius build options (or consult the respective src packages). -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] Open Positions at Greenbone
Hello, this is to drop notice that Greenbone continues to grow and is looking for several new team members. This ranges from development (NVTs, GVM, GOS etc), over Support, Professional Services and not at least: Technical Writer. Being on-site at our headquarter in Osnabrück (Germany) is preferred, but we also support home office. However, our internal language is english. If you are interested to learn more about the opportunity to be with Greenbone, please contact j...@greenbone.net. All the best Jan -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Options for support?
Am Montag, 22. Januar 2018, 19:57:40 schrieb Trent Townsend: > What are the options for purchasing the Greenbone support but not an > appliance? I've on the Greenbone website but the Buy Here link takes you > to a list of other websites where I'm unable to find exactly what I need. > I want to run the code on my system but have access to Greenbone support > and feeds. there is indeed no option to purchase Greenbone Support or the Greenbone Security Feed without a GSM appliance. We did so in the past but supporting problems on arbitrarily compiled modules on arbitrary platforms was too ambitious. Additionally we were not able to guarantee that all NVTs of the feed would work on all the systems. Discussions with customers became endless. So, we stopped that product in favour of supporting a range of well-defined environments which is way easier to maintain and support. -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] openvas report via OMP shows different results compared to GUI
Am Montag, 15. Januar 2018, 21:25:39 schrieb Richard Klein: > apologies if this is perhaps already asked but when I download a report via > the GUI I get different output compared to using the OMP CLI. > > I am using the same format but not all the vulnerabilties are listed in the > report. > > Does anybody have any suggestions? > > > The command I am using: > > omp -R -f a994b278-1f62-11e1-96ac-406186ea4fc5 neutralize personal default settings of the user account by explicitely defining a powerfilter at the command line. Most frequently I saw: rows=10 vs rows=-1 ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] OpenVAS Wiki not linked from openvas.org
Hello, the wiki.openvas.org site appears really outdated and unmaintained, so we decided not to link it anymore from the openvas.org site. We are planning to modernize all of the community infrastructure anyway. All the best Jan -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] report not generating
Hello, I am not quite sure what problem you have. But maybe you mix up a single report (with results) and a list of reports ? The XML you posted looks like the latter and your omp call like the first. Am Mittwoch, 6. September 2017, 14:50:53 CEST schrieb Trent Townsend: > Good day. I'm humbly requesting again if anyone has seen such behavior as > that described below. I've reached my wits end on this one and my PM is > asking me for answers. Thanks in advance. > > Trent > > From: Trent Townsend > Sent: Friday, September 1, 2017 3:23 PM > To: openvas-discuss@wald.intevation.org > Subject: report not generating > > Seemingly at random, my reports from OMP CLI stopped working. I copied the > following XML from openvasmd.log which *can* generate the reports properly > from the web GUI. > > omp -Xi ' filter="min_qod=70 autofp=0 apply_overrides=1 notes=1 overrides=1 > result_hosts_only=1 first=1 rows=100 sort-reverse=severity levels=hml" > pos="1" notes_details="1" overrides_details="1" > report_id="b7c7d80e-fbbd-46f9-9da1-5745907c2301" delta_report_id="0" > format_id="5057e5cc-b825-11e4-9d0e-28d24461215b"/>' > > However, unlike when I run it from the GUI, I only get the following (notice > the filter is even not correct): > > >format_id="5057e5cc-b825-11e4-9d0e-28d24461215b" extension="xml" > type="scan" content_type="text/xml"> > ggc > > 2017-09-01T10:18:43-05:00 > > 2017-09-01T10:18:43-05:00 > 2017-09-01T14:27:15-05:00 > 0 >0 > > > Anonymous XML > > > > apply_overrides=0 min_qod=70 first=1 rows=30 sort=name > > > apply_overrides > = > 0 > > > min_qod > = > 70 > > > first > = > 1 > > > rows > = > 30 > > > sort > = > name > > > > > name > ascending > > > > 3 > 1 > 1 > > > > > I have no idea what caused this change. Looking at openvasmd.log shows no > errors when running the report using omp. What would keep OMP CLI from > generating the full report (it did in previous days so I'm not sure what > has changed)? The result above shows a report count of 3 but I've now > deleted all reports except for 1 and it still only shows output similar to > the following. What I need is the full XML report with details. > > Thanks in advance, > Trent > > > > > > This email is confidential and intended solely for the use of the individual > to whom it is addressed. Any views or opinions presented are solely those > of the author, and do not necessarily represent those of Next Step > Innovation. If you are not the intended recipient, be advised that you have > received this email in error, and that any use, dissemination, forwarding, > printing or copying of this email is strictly prohibited. If you have > received this email in error, please contact the sender. -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] feed.openvas.org (89.146.224.58): Connection refused
Am Dienstag, 29. August 2017, 05:05:43 schrieb Honeypot2k: > It seems that I am being blocked by OpenVAS and have no idea why. > using the update maybe 2-3 times a week. > > rsync: failed to connect to feed.openvas.org (89.146.224.58): Connection > refused (111) rsync: failed to connect to feed.openvas.org > (2a01:130:2000:127::d1): Network is unreachable (101) rsync error: error in > socket IO (code 10) at clientserver.c(125) [Receiver=3.1.2] > > Anyone else experiencing this? > > Any hints, workarounds, solutions available ? we see some high load peaks over the day where connections can be rejected. Also, we changed some network configuration last weekend. Please try again. -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] feeds no diff upgrades?
Am Mittwoch, 23. August 2017, 10:31:33 schrieb Hans: > received 3,539,994 bytes 120,328.60 bytes/sec > total size is 787,873,062 in my calculator this makes 0.45% delta download. Sounds pretty OK. I tested it with a 20 days old SCAP feed where I had 2.9%. -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Greenbone SA
Am Dienstag, 8. August 2017, 13:13:32 schrieb Thiago Cardoso:
> I'm having trouble to install it on ubuntu 16.04.
> Could you help me, i'm following the instructions at INSTALL file and when i
> run: python setup.py install.
> That is the erro show me:
> ==
> Installed /usr/local/lib/python2.7/dist-packages/ospd_w3af-1.0.0-py2.7.egg
> Processing dependencies for ospd-w3af==1.0.0
> Searching for ospd==1.0.0
> Reading https://pypi.python.org/simple/ospd/
> Couldn't find index page for 'ospd' (maybe misspelled?)
> Scanning index of all packages (this may take a while)
> Reading https://pypi.python.org/simple/
> No local packages or download links found for ospd==1.0.0
> error: Could not find suitable distribution for
> Requirement.parse('ospd==1.0.0')
> ==
> Waiting for the help
well, you need the base module "ospd" which is provided together with the
OSP scanner modules.
--
Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/
Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B
202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] GVM-Tools scheduler script
Hello Thijs, looks great! How did you like working with GVM Tools compared to the omp tool? All the best Jan Am Freitag, 18. August 2017, 20:35:29 schrieb Thijs Stuurman: > OpenVAS users, > > Recently Greenbone Dr. Jan-Oliver Wagner announced GVM-Tools which inspired > me to rewrite my task scheduler. Which task scheduler? One day I hacked > together some bash script which called the OpenVAS omp program and parsed > the output. Based on some dirty grep filtering and tricks I managed to make > it start tasks which had not run in the current month. > > Somehow I cannot find my way with the official scheduler... and I know some > of you have built alike or even more elaborate scripts to handle things. > > I never publicly released the bash script because it was ugly, got slow and > had a lot of hard coded constraints which only fitted my own setup. This > time around I implemented everything from scratch based on the GVM-Tools > gvm-pyshell using the gmp calls to get the tasks information in XML format > and start a task. I think this version will work for almost everyone. > > You can find the new scheduler script here: > https://github.com/Thij/openvas_scheduler See the wiki part of the > github page for a screenshot. > > It's written to run as part of the GVM-Tools gvm-pyshell, see the run > example. The code is for Python 3 and I have used urwid for a console text > GUI interface. > > What I want, and this does, it make sure all tasks run at least once a > month. I usually run the scheduler inside a screen and check on occasion. > It does not run 24/7/365, It could but I start the last week of the month > or whenever I feel like it. So what does it do exactly? In short: > > * Get tasks information, then loop tasks to determine: > > oScanner instance (slave) > > oIf the latest completed run was in the period between now and a month > ago > > oTasks in total > > oTasks that haven't run yet > > oWhich tasks are running and their status > > * If there is room for a new task on a scanner instance, look for a > job that fits. (it pop's the list, so it kind of chooses at random) > > oIf so, tell OpenVAS to start the task (just sends start for a specific > task ID) > > (IF it may start, you can configure on which days and between which hours; I > only start jobs during office hours) > > See the code for more information; for example I have limited the settings > by default to two concurrent tasks per slave scanner. This script does not > change anything in your OpenVAS setup/database. It just reads the tasks > information and requests a task start. My setup: A master instance and 4 > slave scanners. Every task is set and configured to run on a specific slave > scanner. > > > Any question, feedback, bug report, fork etc' is welcome. -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] SCAP and/or CERT Database missing on the OMP Server
> On 09.08.2017 18:35, Neeraj Shah wrote: > > Ok thank you Christian. Any plans to upgrade the Greenborne OS to > > version 4.1 in the OpenVAS virtual appliance ? Yes, we are about to prepare an updated GCE with GOS 4.1. -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] IMPORTANT for SVN trunk users: File location changes require manual changes
Hello, the changes are applied now with 3 commits, the last being *r29296*. Any trunk user: Please consider the notes below and read the INSTALL of module "gvm" carefully about the migration. For me it worked like a charm. But if you encounter problems with special setups or systems, please drop a note here so we can fix docs or code. All the best Jan Am Montag, 31. Juli 2017, 16:52:12 schrieb Jan-Oliver Wagner: > Hello, > > this is an IMPORTANT notice to everyone who uses the "SVN trunk" version > of OpenVAS. It is also relevant later on for everyone switching > a OpenVAS-9 setup to the next generation. > > As you know there are quite a number of name changes ongoing in trunk. > Most are already done. > > But there remains one last big change where you need to manually > copy files before starting your services again. > > We have scheduled this SVN commit to > > Thursday, August 3rd 2017. > > > > What do you need to do? > > Please watch out for the commit to module "gvm". The ChangeLog > entry will show you it is the one. > > You can also just wait until we send a reply to this email that we > are done with it. > > > Before you start to build and install this update, first stop > all of your OpenVAS daemons (openvassd, gvmd and gsad). > > Then follow the guide in section "Migrating to Version 8.0" > of the INSTALL file of module "gvm". > > Then you can can build, install and start the services again. > > > > What happens if you miss to do the above? > > You will get a fresh setup with an empty database and default > congfigurations. > > Your old data are not lost. They still are located in the old > location. > > You can stop the services, delete the fresh setup and then > do the copying as described above. > > > > All the best > > Jan -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] IMPORTANT for SVN trunk users: File location changes require manual changes
Hello, this is an IMPORTANT notice to everyone who uses the "SVN trunk" version of OpenVAS. It is also relevant later on for everyone switching a OpenVAS-9 setup to the next generation. As you know there are quite a number of name changes ongoing in trunk. Most are already done. But there remains one last big change where you need to manually copy files before starting your services again. We have scheduled this SVN commit to Thursday, August 3rd 2017. What do you need to do? Please watch out for the commit to module "gvm". The ChangeLog entry will show you it is the one. You can also just wait until we send a reply to this email that we are done with it. Before you start to build and install this update, first stop all of your OpenVAS daemons (openvassd, gvmd and gsad). Then follow the guide in section "Migrating to Version 8.0" of the INSTALL file of module "gvm". Then you can can build, install and start the services again. What happens if you miss to do the above? You will get a fresh setup with an empty database and default congfigurations. Your old data are not lost. They still are located in the old location. You can stop the services, delete the fresh setup and then do the copying as described above. All the best Jan -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] NVT Feed 14 days old
Am Freitag, 19. Mai 2017, 14:39:30 schrieb Miki Kologranic: > On the web based GUI under "Feed Status" it says that the NVT content is 14 > days old. My last version is 201705050549. > Using the greenbone-nvt-sync -verbose --progress command, the feed seems to > update and exits clean. Is there a way to confirm the latest available > version? Also, how far behind are the NVT updates for free version vs the > enterprise? Indeed there is currently a delay of 14 days between the community feed and the enterprise feed (plus the enterprise feed contains some more). We are currently working on changing this again. Especially to get "Hot NVTs" to the community timely. -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] GSM appliance can not go beyond 3 GB of memory
Hello, Am Mittwoch, 12. April 2017, 18:46:24 schrieb Niyazi Elvan: > On KVM, my VM has 8 GB of memory for GSM, but as I log in to system only 3 > GB of it is available. (kernel is 64 bit) > > Is it an on purpose restriction or a bug ? > > Any ideas ? this is indeed a restriction on purpose for the GCE. Best Jan -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Credential configuration
Am Dienstag, 28. März 2017, 08:45:04 schrieb Bruckner, Simone: > after upgrading to the lastest rpm packages it seems that the > configuration of our configured credentials changed from "Username + SSH > Key" to "Username + Password". Is there a way to change that back or do we > have to create new credentials? hm, I am not aware of such a migration bug, but would like to track this down. Was it a auto-generated credential? However, you can not change the type in the GUI. And depending on the type of bug, you won't even be able to fix this in the database directly because the key might be missing. -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS 9 Distributed Scanner
Am Donnerstag, 23. März 2017, 16:31:48 schrieb Roger Davies: > I notice in the release notes that the OpenVAS 9 Scanner has changed from > TCP to a Unix Socket. > > I currently have a distributed setup with various scanners scattered around > the place and a central Manager on Version 8. > > I've now built the new OpenVAS9 manager with Postgres support, but can't > now connect to the new OpenVAS 9 scanner on a remote site becuase it's > using sockets instead of TCP. The GSA shows OpenVAS as a scanner with port > 9391, and it lets me connect to a version 8 scanner, but obviously not a > version 9 scanner. > > Is there a way of doing this? there are various tools that can help with the transition between file sockets and SSL TCP ports. stunnel for example. -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] how/why plugin are set to 'False positif' by manager
Am Mittwoch, 15. März 2017, 16:52:56 schrieb Sebastien Aucouturier: > as you may have seen in a previous discussion, > i got some plugins declared as 'False positive' by manager , > > even if i set the levels to get thoses plugins in the reports, > their cvss are not correct and set to value : -1, is there a tip to get the > correct cvss using omp cli ? > > if no, how the FP is evaluate ? how can i avoid that ? FPs are created via "Overrides". Either you remove your existing override rules or you disable overrides in your view (see the powerfilter options). -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Openvas9 pdf report issue
Am Dienstag, 28. März 2017, 05:49:32 schrieb Yan Qian: > add error log of pdfTeX command. the PDF on my Debian works. I needed to install "texlive-latex-extra" for it. Your log reads like there is missing a font. Maybe you need a package like "texlive-fonts-recommended"? However, that isn't the case for Debian 9. -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] NVT Current Feed
Am Dienstag, 14. März 2017, 14:12:17 schrieb Matt Koivisto: > I've noticed that the current feed archive > (http://www.openvas.org/openvas-nvt-feed-current.tar.bz2) hasn't received > any of the commits made from > http://lists.wald.intevation.org/pipermail/openvas-nvts-commits/ since > about mid-February. Does anyone have information as to when these commits > will be incorporated into the current feed? we are currently re-arranging the Community Feed updates for a better automation. Some longer delay may happen during this month. An age of over 1 month would nean that something does not work as it should and any hints are welcome. The above file is from end-of-Feb or early March. However, even after we improved the automation: the Community Feed will never be as current or as complete or as QA'ed as the Feed that comes with the Greenbone Security Manager (GSM). -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OPENVAS-CLI - OMP for MS Windows?
Am Montag, 13. März 2017, 10:12:26 schrieb Andrea M.: > I'm currenlty using some Excel spreadsheets in order to manage my OpenVAS8 > landscape. These spreadsheets interact with OpenVAS using a Windows > compiled version of the CLI (omp.exe). I've downloaded this omp.exe file > quite a few time ago from the Greenbone web site. The exe file is four > years old (1.3+beta2.SVN.r17463) and I'm quite sure that it will not be > able to work properly with OpenVAS9, given the number of changes occurred > in the OMP protocol. the "--xml" option should still work fine because omp.exe then does not make a lot of assumptions about OMP and rather sends the query. -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Openvas 9 and slaves
Am Donnerstag, 23. Februar 2017, 13:35:36 schrieb udi romano: > I understand that Openvas 9 doesn’t support slave entity anymore. > Can anyone explain how they should be configured through the new OMP > protocol? check the "Scanners" section. Slaves are now Scanners. -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] CSV reports
Am Mittwoch, 22. Februar 2017, 16:44:10 schrieb Ebert, Christian: > using the report format CSV Results I found, that this report does NOT > export the notes, the original CVSS and the override notes. > > Why not? > > Wouldnt it be a good idea to export these data too? But consider that you could have many notes and many overrides for each single result. This could become disruptive to the output. -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] CVSS scanning and reporting in OpenVAS
Am Sonntag, 19. Februar 2017, 08:01:25 schrieb Oliver Marshall: > I have a dozen Windows servers that I need to produce CVSS scoring for. > > Can this be done with OpenVAS? We already run a monthly Full report in > OpenVAS to help find any key issues that need to be dealt with but I can't > see an obvious mention of CVSS scores in the reports. I am not sure what you are after, but a classic approach to the severity of some system is simply max(severities of single vulnerabilities). There are arbitrary other formulars how to go for this and it is basically up to you to select a suitable one. You might want to use a spreadsheet for it and use a CSV export of scan results. -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS9 - greenbone-scapdata-sync hangs and never completes
Am Mittwoch, 8. Februar 2017, 06:35:11 schrieb TN TN: > When we try to run the command greenbone-scapdata-sync on any OpenVAS9 > installation the process hangs @ the following location. > > sent 1,235 bytes received 749,847,112 bytes 816,383.61 bytes/sec > total size is 749,659,934 speedup is 1.00 > > Is there an update to the script that fixes this error? Thanks TN hm, I am not aware of such a problem. Are you using the latest version? Any network management between your system and the feed service that might affect the connection? -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS 8 demo image contains expired certificates
Am Dienstag, 24. Januar 2017, 12:33:23 schrieb Eero Volotinen:
> It's sad to see that openvas demo image is non-working by default.
>
> Tennable and Nexpose provide working trial vm images by default and openvas
> should do the same.
finally we uploaded a new VM ("GCE") as iso image and corresponding to
upcoming OpenVAS-9.
--
Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/
Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B
202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OMP Slave Setup on Openvas9
Am Dienstag, 10. Januar 2017, 15:35:11 schrieb TN TN: > Hi all, another issue I'm having is setting up an OMP slave. I see the > feature has been moved under the Scanners now, but when i setup the OMP > slave and do the (checkmark test). It comes back with an error, and I dont > see any packets leaving the master server heading to the slave server when > I do the "checkmark" (verify scanner test) through the greenbone GUI. Any > ideas?? Thanks TN with moving to "Scanners", you need to take care of the "Credentials" like it is done for external OSP scanners for example. Can you check your certificate setup? Can you check the log file of openvasmd? -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] openvas needs time to load nvts
Am Donnerstag, 5. Januar 2017, 15:19:54 schrieb Shreyas M R: > I know that openvas manager stopped in between. I want to know is there any > way that we can get to know that all the nvts are loaded. If you see a openvassd process with the title "Waiting for incoming connections", then the loading of NVTs is complete. -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Slave feeds sync
Am Mittwoch, 28. Dezember 2016, 17:22:30 schrieb Christian Fischer: > On 27.12.2016 17:14, kir.bl...@gmail.com wrote: > > Hi all, > > I use OpenVAS 9 master-slave configuration. > > How I can sync feeds on slave from master via omp automaticaly? you can't do that via OMP. Each slave needs to update its scanner on its own. Greenbone established a full sensor management including the updates with the Midrange and Enterprise GSM Appliances. The update even allows for Airgapped networks. The solution is outside OMP and quite complex. -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Report formats
Am Freitag, 23. Dezember 2016, 08:44:57 schrieb Fábio Fernandes: > Are there paid conversion utilities for OpenVAS? well, Greenbone customers receive support about special report formats needed. So the answer is "yes" ;-) -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Reports Not Showing in Greenbone
Am Donnerstag, 8. Dezember 2016, 16:59:09 schrieb Stewart Campbell: > All of a sudden my reports don't show in Greenbone. I tried running a new > report which completed successfully but reports are still blank. > > When I enable debugging in the config and restart I can see the data below > in the log when trying to view the reports in the GUI. This looks like it > knows the reports are there but it doesn't show them. > > I see '1 - 5 of 5 (total: 5)' at the top of the table - there's just no > reports in the table. > > Everything is updated to the latest version 6.0.11. > > Any ideas? Thanks for your help. Can you retry with the default filter? -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Sharing notes and overrides
Am Freitag, 18. November 2016, 13:45:35 schrieb Thijs Stuurman: > OpenVAS users, I got something to work how I wanted it but perhaps there is > an easier way? Have you tried the "New Permission" dialog instead of the omp command line call? > * The admin user can see the role (because he created it) but to > make it visible to the regular user I have manually added the permission (I > have a few other roles which have to share this role): > > omp -u admin -w XXX -Xi "get_roles id=User role UUID'>role id=SHARE-NOTES-OVERRIDES uuid'>" -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] GSAD Super Admin permission bug
Am Freitag, 18. November 2016, 12:45:56 schrieb Thijs Stuurman: > When a 'regular' user creates an override or note without any additional > permissions, nobody else can see it except for a Super Admin. In the GSAD > interface, a Super Admin user cannot delete these while the permissions to > do so are actually in the system. Using OMP CLI with the XML command to do > so executes successfully. thank you for the report! At first glance it looks indeed like a bug, but not a critical one. I've added it to our todo list. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Filtering of Scan Reports
Am Mittwoch, 16. November 2016, 17:01:52 schrieb Jeremiah Pabiona: > Just a question, would it be possible to filter the reports that OpenVAS is > sending? If you specify a filter in the Report Results section and save it, then you can use it as part of an Alert. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] openvassd recvfrom infinite loop
Am Freitag, 28. Oktober 2016, 12:23:00 schrieb Thijs Stuurman: > I notice one particular scan is never really ending. The openvassd just eats > CPU resources such as: What means "never" for you? Are you running the latest patch level? -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Manual start scheduled job bug?
Am Montag, 24. Oktober 2016, 06:54:03 schrieb Thijs Stuurman: > I have a few OpenVAS installations running, one serving as a 'master' which > has the others configured as Slaves. This works quite but last Friday I had > to reinstall two Slaves after I did this: the openvasmd.log files from the master and the slave would help to understand what happened. In principle, manually starting a scheduled task should not create any problems. BTW: You should update your setup. There were quite some fixes, some about scheduling, see the CHANGES of openvas-manager for example. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OPENVAS EXPORT TO VERINICE
Am Sonntag, 23. Oktober 2016, 14:49:10 schrieb Παναγιώτης Λεόντιος: > Whenever I export a GSM scan to VERINICE via a .vna file, there is no rating > of threats and vulnerabilities in them. > > That is, although there is normal GSM CVSS rating (and GSM Lvl and CVE) > imported, the Threat Likelihood and Vulnerability Level are always set to 0. > > It seems that the CVSS rating DO NOT adjusts the Threat Likelihood and > Vulnerability Level into scenario. > > The consequence of course is that no automatic risk assessment can be > conducted, and therefore importing of openvas scans into verinice is not > actually useful because ALL the C-I-A calculations are the same for all > assets and all scenarios under the same process. > > Anyone with a hint or solution or better knowledge of the issue? have you had a look at http://docs.greenbone.net/GSM-Manual/gos-3.1/en/connecting.html#verinice ? With non-GSM you don't have the automatic connection with verinice.PRO, but the logic should be the same when doing the transfer manually. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Scans stop at 1% with "Failed to gnutls_bye: Error in the push function."
Am Sonntag, 16. Oktober 2016, 21:50:01 schrieb Christopher Cavello: > I'm using Openvas 8 (atomic RPMs) on Centos 6. All my scans stop at 1% > with "Failed to gnutls_bye: Error in the push function." > > For gnutls, I tried both the centos version (2.8.5) and the atomic > version (3.1.25) of the library and CLI. Is this merely a certificate > error, and if so, how do I fix? I have re-generated the certs and > received the same results. I have pointed openvasmd to both gnutls > versions with the same results too. it smells like a certificate problem. Perhaps some remains from an older installation? Doing the certificate creations manually is ... well ... challenging. There are scripts to assist (see the INSTALL guide). -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS not finding any vulnerabilities that it find during last run
Am Freitag, 14. Oktober 2016, 19:54:49 schrieb Paul Snow: > I setup openvas in Kali Linux, downloaded MetaSploitable 2 VM and ran > OpenVAS against it. It took a while for OepnVAS but it eventually showed > many vulnerabilities (no surprise). I deleted and re-created that task > against same VM but now it finishes very fast and shows no vulnerably. I > try running this task multiple times but didn’t had luck. As far as I can > tell task is using same configuration settings that I used before. Any > ideas what could be wrong? have you restarted the target system? Perhaps something died there? Does the report contain any log results with clues? -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS used in conjunction with NMap for vulnerability analysis
Am Donnerstag, 13. Oktober 2016, 02:03:11 schrieb Paul Snow: > This may be a dumb question but is it possible to use OpenVAS for > vulnerability detection with network data scanned by any other tool ( like > NMap)? If so, can you provide any links on how to accomplish that (such as > what data is needed and in what format by OpenVAS) There are some other port scanners in the port scanner section of the scan config if this is what your are asking. For other vulnerability scanners there is the OSP concept. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OMP 6 - Failed to get report
Am Dienstag, 11. Oktober 2016, 12:22:21 schrieb Ryan Marsh: > I am trying to run reports from my server running OpenVAS 9/OMP 6. I seem > to have hit an inconsistency I can't explain. When I run a command like: > > omp --get-report [report ID] --format [XML format] test.xml > > I get the response "Failed to get report." I can't seem to find the cause > of this. I double checked that the report I am trying to pull exists > running: > > omp --get-tasks --details > > I get the list of reports, and sure enough the report I am trying to run is > on there. There is nothing present in the openvasmd.log file aside from > the activity of my last scan. The get-report command used above seems to > work fine on another server I have running OpenVAS 8/OMP 6, so I am > confused why it's not working on this newer installation. Any suggestions? well, OpenVAS-9 is BETA and meanwhile it is OMP 7.0. Please try again, we are currently in the process to update all packages for the final stable release. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS hangs the system while using very few ressources
Am Dienstag, 11. Oktober 2016, 11:51:13 schrieb tatooin: > I'm using OpenVAS to scan large networks using default scan profiles. So > far so good. However, at some points during the scan, the system becomes > unresponsive, while OpenVAS keeps running and scanning. So the system > works, but very very very slowly until the scan finish. > > Sometimes I can't even ssh into the system anymore. When this happens, > if I run a top command; while the command takes ages to succeed, it > doesn't show any particular overload. CPU and memory consumption are > perfectly normal, and actually even low. > > So I suspect a problem of buffer; probably network buffers since this > happens only when scanning large networks (/22 or above). > > Is there any /proc settings I could tweak to fix the issue ? I'm using > Openvas on kali linux. Usually if shell the commands take very long, you see 100% CPU loads. Maybe your disk IO? -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] GSAD keeps on crashing
Am Dienstag, 11. Oktober 2016, 01:55:47 schrieb Ken: > I have been trying yo solve the problem with GSAD, keeps on crashing > the message printed in the log is : > > O j: ... this is a bug (sexp.c:1340:vsexp_sscan) > > > What are my options for resolving this error. sending more details, like the versions, the OS, the logs and what action actually triggers the problem. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Opens running OpenScap config checks?
Am Donnerstag, 29. September 2016, 10:41:57 schrieb Thomas Marsh: > Can OpenVas run opens cap configuration checks? there are OSP-based approaches to control for example ovaldi as a scanner. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS 9 - empty reports
Am Donnerstag, 29. September 2016, 18:34:40 schrieb Christoph Gruber: > I am trying the OpenVAS 9 beta 3. > Openvas-check-setup —v9 —server gives: > root@my:/root# ./openvas-check-setup --v9 --server > openvas-check-setup 2.3.3 BETA was quite in flux. we are currently preparing an updated version of the check setup script for the final status of OpenVAS-9. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] IP mixed in report
Am Mittwoch, 21. September 2016, 12:55:01 schrieb Nicolas Schmitz: > I'm trying to get report, on a per machine basis, so I can send the > report to the admin sys concerned by the issues. > > I do this in gsad, and it works well for almost all. Howewer, for some > of them, I get a report with 4 or 5 machine instead of one, because the > filter match them. For example : > > ="100.10.10.14" notes=1 overrides=1 result_hosts_only=1 levels=hm > first=1 rows=50 sort=name > > Will match only 100.10.10.14 in gsad, but when I ask for a PDF report, > it will match > > 100.10.10.14, 100.10.10.141, 100.10.10.142, etc... > > Do you know how can I get the report to be "as clever" as the filter in > selection of host ? which version did you try? I do not find the patches right away, but I seem to remember this was fixed/changed at some point. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OMP 6.0 - Failed to get report
Am Freitag, 16. September 2016, 16:59:57 schrieb . .: > I have recently upgraded to OpenVAS 9 and OMP 6.0. I've noticed some of the > OMP command syntax has changed. well, OpenVAS-9 introduces OMP 7.0 and was marked BETA at the time of your trial. Recently the OMP documentation of OMP 7.0 was updated and at the end there is a section about changes compared to 6.0. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Windows Authenticated Scan Fails As Using TLS1.0
Am Dienstag, 13. September 2016, 22:24:56 schrieb Simon White: > Relative newcomer to OpenVAS. Running V8 on Kali. > I have configured credentials with appropriate rights in GSA but the Windows > host reports an error from a remote connection attempting TLS 1.0 I have > seen various threads discussing changing the cipher order but none seem to > match the configuration that I have. Advice please on fixing this can you provide more information about the specific error report? -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Executive report format
Am Mittwoch, 14. September 2016, 14:39:00 schrieb patrick kinuthia: > I see that the Executive report format is not present with the default > installation of OpenVAS anymore, but I found the report definition on the > following URL; which I imported into my OpenVAS, but the new report never > gets shown as an export option or even on the Global report format. > http://www.greenbone.net/download/rfps/gxr-1.0.8.xml the GXR is designed for the commercial Greenbone Security Manager and the digital signature only in the Greenbone Security Feed. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Multiple Tasks Not Running At Same Time
Am Mittwoch, 7. September 2016, 19:41:19 schrieb Turner, Jonas: > Just me again. :) So I started a few tasks to see how they would behave on > the server, but it looks as if the other tasks are waiting for the first > one to finish. The first task has 1520 IP's being scanned. Is there a > reason why the other tasks wouldn't scan as well at the same time? no, they should run in parallel. Have a look with htop while the scans are running. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Alert: Targets In Email
Am Mittwoch, 7. September 2016, 14:21:19 schrieb Turner, Jonas: > Is there way to add the "targets" that are being scanned to the email alert > that is sent out when the scan is 'requested'? no, there is no $ variable for this. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Alert tag options
Am Dienstag, 6. September 2016, 17:03:22 schrieb TN TN: > Hi all, is there a way to display the task_id in the Alert message. i know > you can do a $n to display the task name, but how can I display the task > ID? Is there a '$' option for that? Thanks no, the uuid is not availble. BTW, the online help lists all of the available $ variables. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Filters for Assets -> Hosts
Am Freitag, 2. September 2016, 08:55:35 schrieb TN TN: > Hi all, is there anyway to add a filter on the hosts to show only the last > result for that host? Currently if the host is scanned 3 times, it will > show all results for that host and not just the latest. Any thoughts on > whether or not I can add a filter to accomplish this? Thanks T in case you refer to OpenVAS-8, it might make sense to go via Scans->Results to filter what you are interested in. The classic host assets view will not further be extended. It is still there as "classic" in OpenVAS-9 and will eventually be removed in future releases. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Unable to import Schedule XML using omp CLI
Am Mittwoch, 31. August 2016, 21:21:12 schrieb Rion Carter: > I'm new to OpenVAS and am trying to load schedule XMLs that were exported > from one OpenVAS system to another. In looking over the documentation > (http://www.openvas.org/omp-5-0.html#command_create_schedule > [http://www.openvas.org/omp-5-0.html#command_create_schedule]), it looks > like I should be able to create an XML file and import it using this > command line: omp -h 127.0.0.1 -u admin -p 9390 -v --xml schedule-test.xml. --xml is not supposed to get a filename as argument. Also please be aware that OMP 5.0 is not supported anymore. If you are using OpenVAS-8, you should check back with OMP 6.0. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Managing many scanners instead of a master-slave architecture?
Am Donnerstag, 18. August 2016, 18:35:04 schrieb LeBlanc Benjamin-Hugo: > We are seriously considering deploying OpenVAS in our organisation, and we > will most certainly opt for a distributed architecture that matches our > network segmentation. We understand so far that a Master-Slave > configuration involves two instances of OpenVAS, each slave running on its > own Manager-Scanner binome. But since each such Manager "has to take care > on its own to update the feed and release", while the Scanner synchronizes > automatically with its Manager, could we instead use one single Manager, > and bypass the Slave Managers to connect directly to multiple scanner > components of OpenVAS, defined as additonal scanners in the web interface? > I.e., instead of having one OpenVAS, PaloAlto and w3af scanner, running > rather many instances of the OpenVAS one from one single Manager? And if > so, how would that be handled by the Manager, performance-wise? even in OpenVAS-9 it is foreseen to have a manager next to each scanner. We do plan to change this beyond version 9, essentially wrapping the the scanner with a OSP interface. In version 9 we have done a first step into this direction: "Slaves" as in OpenVAS-8 are now just a special scanner type and part of the "Scanners". -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Easy way of seeing all vulnerabilities for one host (openvas 9beta)
Am Donnerstag, 4. August 2016, 11:34:51 schrieb Ralf Hildebrandt:
> Is there an easy way of seeing all vulnerabilities for one host?
>
> I get a report saying: "Report: Results (22189 of 27195)"
>
> One column is labelend "Host". Clicking on the IP address in the host
> column gives me a get_asset page, showing "Latest Identifiers" and
> "User Tags" -- in openvas8 this gave me all findings for that host
> instead.
>
> How do I get the old behaviour back?
the old ("classic") asset management is still there, see the menu.
However, there other ways to get what (I assume) you want.
For example you could go via the "Scans->Results" section and refine
the filter for the host and (if that is what you indend) for the report UUID.
Also in the Report results browser there is a menu item "Hosts" which might
help you get what you want.
--
Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/
Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B
202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] New users cannot see old tasks?
Am Freitag, 29. Juli 2016, 11:57:58 schrieb Ralf Hildebrandt: > I'm using openvas 9 beta 3 from the PPA. > > It's working like a charm, and today I added several "LDAP Auth Only" > users (I gave them the "admin" group), so my colleagues can have a look > at the current tasks and results (without having to share the top secret > admin password). > > Alas, they can log into GSAD, but they cannot see anything (no > reports, no tasks). > > Is this intentional? If they are in the same group, this does not mean automatically they can see all the data of the group members. The data need to be explicitely shared with the group via a permission. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Sqlite database lock when login and starting scan
Am Donnerstag, 28. Juli 2016, 14:34:57 schrieb Romain Fritz: > I'am updating openvas from openvas 7 to openvas 8 and I hava some trouble > with sqlite database. I did an openvas --migrate and an openvas --rebuild > without any errors but when I can login on gsa (https://myserver:9392/) but > in openvasmd logs I see : md main:WARNING:2016-07-28 12h31.09 utc:10874: > sql_exec_internal: sqlite3_step failed: database is locked md > main:WARNING:2016-07-28 12h31.09 utc:10874: sqlv: sql_exec_internal failed > md main:WARNING:2016-07-28 12h31.09 utc:10874: sql_exec_internal: > sqlite3_step failed: database is locked md main:WARNING:2016-07-28 > 12h31.09 utc:10874: sqlv: sql_exec_internal failed md > main:WARNING:2016-07-28 12h31.10 utc:10875: sql_exec_internal: sqlite3_step > failed: database is locked md main:WARNING:2016-07-28 12h31.10 utc:10875: > sqlv: sql_exec_internal failed md main:WARNING:2016-07-28 12h31.10 > utc:10875: sql_exec_internal: sqlite3_step failed: database is locked md > main:WARNING:2016-07-28 12h31.10 utc:10875: sqlv: sql_exec_internal failed > I can start a task but it doesn't do the scan (I don't see any package > between openvas server and the target server). > > Do you have any solution to unlock the sqlite database ? I'd first try from a fresh start (a reboot of the machine is a simple way for this). There are some tricks to repair the sqlite db, but I am not too familiar with these. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS-9 Beta: Feed-data for CERT-Bund incomplete
Am Sonntag, 24. Juli 2016, 17:46:39 schrieb Schwarz Stefan: > just updated my testing environment to run V9 from latest sources on > repository (SVN revision 25823). Except some minor flaws there is one point > that really looks strange. > greenbone-certdata-sync runs successfully and returns correct data for > DFN-CERT. But data for CERT-Bund ends on Feb 3rd, showing me a count of 4231 > advisories, according to > https://secinfo.greenbone.net/omp?cmd=get_info_type=cert_bund_adv > s=1=guest there should be 5106. > I cannot see any error, tried also removing > /usr/local/var/lib/openvas/cert-data but got a new feed with same results. > My cert-data-folder contains: > -rw-r--r-- 1 root staff 6042799 Feb 5 10:01 CB-K15.xml > -rw-r--r-- 1 root staff 181 Jul 21 07:51 CB-K15.xml.asc > -rw-r--r-- 1 root staff 608339 Feb 5 10:01 CB-K16.xml > -rw-r--r-- 1 root staff 181 Jul 21 07:51 CB-K16.xml.asc > As you can see the file is from Feb 5th and cannot be actual. > > Is there a problem with the feed or with OpenVAS-9? I can not remember to have had similar problems in the past months. My CERT Data are all up-to-date with OpenVAS-9. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS -> Sourcefire connector Alert
Am Donnerstag, 21. Juli 2016, 00:06:26 schrieb Fábio Fernandes: > Hi i am trying to use the source fire connector. > I already managed to install sourcefire report format and it works and then > i tested the alert but it makes no connection at all. Then i investigated > in the source code and found that OpenVAS Manager executes an script called > greenbone_sourcefire_connector that is required in the INSTALL from > openvas-manager source. Does anyone know where to find this script? I have > tried to find it in older sources but without success. Thanks! AFAIR a public version used to be available from Sourcefire ... The full support however is available with the Greenbone Security Manager appliance. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Alert - Simple Notice - Changing Content
Am Mittwoch, 20. Juli 2016, 14:29:00 schrieb TN TN: > Hi, there is an option to modify the content except on the Simple Notice > alert. Am I missing something or can we modify the Simple notice content as > well? no, but I noted this good point for future releases. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Cant start openvas service.
Am Dienstag, 19. Juli 2016, 15:10:13 schrieb christopher.n...@pathologyresource.net: > Ran the openvasmd --modify-scanner 08b69003-5fc2-4037-a479-93b440211c73 > --scanner-ca-pub /var/lib/openvas/CA/cacert.pem --scanner-key-pub > /var/lib/openvas/CA/servercert.pem --scanner-key-priv > /var/lib/openvas/private/CA/cakey.pem > > But still getting Operation Start Task Status Code 503 Status message its > temp down. > > I changed the hostname of the server and then ran openvas-mkcert now I can’t > get the service to start again. did you strictly follow http://plugins.openvas.org/ova_503.txt ? -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Database Version Error (postgres migration)
Am Freitag, 15. Juli 2016, 09:53:29 schrieb prydzynski .: > I am currently having an issue when attempting to use the > 'openvas-migrate-to-postgres' script. The database version returned from > the command "select value from meta where name = 'database_version';" is > '146'. The bash script checks this and returns "Database version not > supported" as the only versions supported are 133, 134, 135, and 136. Is > there a workaround for people using version 146 (or anything in between) or > can we not migrate to postgres? in preparation of OpenVAS-9 we recently extended the migration part. So, at least migration from 146 sqlite towards OpenVAS-9 should work. fyi: 146 is OpenVAS-8. OpenVAS-9 will have 184. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS 9 - empty reports
Am Donnerstag, 14. Juli 2016, 18:12:54 schrieb stephanecap: > I install OpenVas 9 on Debian 8 from the sources files. > > It look like OK but when I try to create a task, the report is always > empty. I have the message : > > _Empty reports can happen for the following reasons:_ > > _ The target hosts were regarded dead._ > _ The filter does not match any result._ > _ A very small or non-verbose scan configuration was applied._ the current state of OpenVAS-9 introduced a more helpful way to understand what might be going on if the report is empty. Try it :-) -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS - Integrated Fuzzing Tool/Frameworks
Am Donnerstag, 14. Juli 2016, 09:14:22 schrieb Kenny Aondona: > I know that a good number of security tools are integrated into OpenVAS e.g > Wapiti, NMap. I was just wondering if there are fuzzing tools that are also > integrated or at least some NVTs that conduct fuzzing ? for example? -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Trend indicators suddenly gone
Am Mittwoch, 13. Juli 2016, 17:50:23 schrieb Ryan Carter:
> I have noticed the same issue for anything "scheduled".
I can not reproduce this, even for scheduled ones.
There is no trend icon if there is only a single fully completed
report ("Done") for the task.
--
Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/
Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B
202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVas install ERROR: The number of NVTs in the OpenVAS Manager database is too low
Am Dienstag, 5. Juli 2016, 09:13:41 schrieb michael buki: > Status check shows: > > ERROR: The number of NVTs in the OpenVAS Manager database is too low. > FIX: Make sure OpenVAS Scanner is running with an up-to-date NVT > collection and run 'openvasmd --rebuild'. > > previously was warned to enable nvt signature checking. > i did it by "nasl_no_signature_check = no" in /etc/openvas/openvassd.conf > > also did: openvas-nvt-sync --- [i] Feed is already current, no > synchronization necessary. also did: openvasmd --rebuild > > still status check shows same error, log attached I guess the feed update routine got interrupted for some reason but some timestamps were updated already. I assume that the probem solved on its own after some time (until the next feed update on the server happened). However, there are also some option in the sync scripts to enforce updates, see with --help. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] openvas-check-setup hangs
Am Dienstag, 28. Juni 2016, 11:48:21 schrieb Daniel Feenberg: > I did a "shutdown -r" on my openvas server (Kali) and now when I run > openvas-check-setup it hangs after displaying "OK:OpenVAS Manager database > contains about 47590 NVTs". The openvas-check-setup has always worked > in the past - this is the first time it has failed. The openvas system > appears to be working - both web UI and scanner seem to function in spite > of the failure of openvas-check-setup. > > I did the reboot because several openvasmd processes were running at 100% > of a CPU each, and this seemed wrong. There were no scans in progress. It is hard to guess about the problem without more details like the full check-setup output. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS GUI Customization Options
Am Freitag, 24. Juni 2016, 14:21:32 schrieb Kenny Aondona: > I have tried to find information on customizing OpenVAS web GUI for a > research project. > Having made no success less this news item at openvas news_archive > <http://www.openvas.org/news_archive.html>. I believe this is the best > place to ask ? I will appreciate any information from this community. technically it is all in place to create custom "faces". There are two in the source code repository. Read the GSA documentation carefully how to activate one of the faces. Next you can start with a copy of a existing face and alter it the way you like. However, this all is not really recommended for non-programmers. It is a lot about XSLT transformations and you will get familar with the OMP XML objects. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Total number of IPs in all targets
Am Montag, 20. Juni 2016, 08:08:58 schrieb TN TN: > Hi, does anyone know of a way to get the total number of IPs from all your > targets via GSA or omp? Thanks -T scanned ones or the ones specified by targets? Alive or dead or both? For all users or for a single user? Depending on what you actually are looking for, you might want to use OMP or even access the database directly. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Help require in maximizing the target size
Am Dienstag, 14. Juni 2016, 10:20:13 schrieb Girish Degaonkar: > I have tried to locate the file openvas-manager.extra but could not able > to find it at /etc/default. > > Do I need to create a new one? yes. > I have also tried #openvasmd --max-ips-per-target=65535. there is a built-in maximum of 40K for --max-ips-per-target. You need to change the code to go beyond this. You might experience other side effects then, though. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Need help fixing Openvas
Am Montag, 13. Juni 2016, 13:02:11 schrieb Josh Miller: > am having trouble getting openvas to work. I am new to kali and linux in > general. I have openvas installed and I have run the openvas-check-setup > and I have a few warnings, but it says the installation is OK. I am able to > access the greenbone web assistant gui and I have setup a task and a > target. When I try and run a task I get this error: > > [image: Inline image 1]I most likely an expired certificate, see here: http://plugins.openvas.org/ova_503.txt -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS-9 BETA with Postgresql
Am Sonntag, 12. Juni 2016, 14:26:54 schrieb TN TN: > Hi, the install (openvas9 postgresql) seems to be going well so far. I've > reached the point where most of it works with postgresql, however I still > cant issue the commands sudo greenbone-scapdata-sync and sudo > greenbone-certdata-sync with success. It's displaying an error about the > database not existing. How can I tell these two commands that the database > is a postgresql? Thanks -T > > On 11 June 2016 at 16:57, TN TN <mpm7...@gmail.com> wrote: > > Hi, has anyone tried installing openvas9 with postgresql support? I'm > > thinking of trying it out this weekend. I'll let the group know how it all > > goes, just curious if anyone else has tried it yet, and if there is > > anything i should look out for? Thanks -T the sync script were reworked and we merged the openvas* functionality into the greenbone* scripts for OpenVAS-9 recently. We tested both feeds with postgres successfully. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] sqlite3_prepare failed: no such table: result_new_severities
Am Samstag, 11. Juni 2016, 10:59:39 schrieb tatooin: > I have the following warning error in my openvas-manager (6.0.5) logs: > > md main:WARNING:2016-06-11 08h38.17 CEST:31119: sql_prepare_internal: > sqlite3_prepare failed: no such table: result_new_severities > md main:WARNING:2016-06-11 08h38.17 CEST:31119: init_iterator: > sql_prepare failed > md main:WARNING:2016-06-11 08h38.17 CEST:31119: sql_close: attempt to > close db with open statement(s) > > This error happens right after a scan task finishes, and while my > manager is still non-responsive (stuck in rebuilding forever) > > I wonder if this could be related to > http://lists.wald.intevation.org/pipermail/openvas-discuss/2015-August/00831 > 7.html > > Could the same fix apply ? In general I think it was a migration problem/bug. I assume with 6.0.9 the problem went away meanwhile? -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] WEB UI langage support for upcoing OpenVAS-9
Hello, as we are getting closer to the OpenVAS-9 release, we can have a look at the translations to be supported. We have 100% German etablished already. For Chinese, French, Russian and Turkish we have large number of OpenVAS-8 translations available. But these need confirmation/adjustments to walk through. A Portuguese translation is in the progress by a community member and makes great progress (at 20% already). We started on Arabic (2%) to see how the right-left style works out. We think it is accetable, though not optimal. Worth to continue with it. All in all we talk about ca. 7400 words to be translated. Anyone interested to contribute to a translation, please let me know. It is easy to do the translations with a web platform where we can provide access. You don't need to know anything about .po and .pot files. You should have a running OpenVAS-9 trunk setup though. Of course a full translation will take a couple of days to do. All the best Jan -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] Feed server bandwidth increased
Hello, a couple of days ago we increased the bandwidth of the new dedicated community server by a factor of 10. We increased the bandwidth per connection step by step and it seems we are serving most syncs quite well now. Please let us know if you still face problems. All the best Jan -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Using OpenVAS in a windows-only environment
Am Donnerstag, 13. Oktober 2016, 03:12:26 schrieb Eero Volotinen: > it means that you need virtual environment like virtualbox with linux to > run openvas. > > or buy commercial product like tenable nessus I do realize that there is need to better communicate that the commercial alternative to OpenVAS is the Greenbone product series, the Greenbone Security Manager appliances. After all, using OpenVAS as a start and when it comes to professional setup not bying Greenbone does not help the OpenVAS community. I have a couple of ideas how to improve the visibility of Greenbone as the commercial vendor of OpenVAS and at the same time continue to provide a transparent GPLed solution to the community. The first idea is to derive a "Community Edition" from our GSM ONE to replace the "OpenVAS Demo VM". This will make it far easier to try out OpenVAS at no costs and without any obligations and at the same time provides a clear hint about the commercial option. Best regards -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Results filter to show last report results
Am Donnerstag, 9. Juni 2016, 06:39:00 schrieb TN TN: > Hi, Is there a way to filter the results in Greenbone to only show the > results of each schedule's last report? The default currently shows results > from all reports and not the latest. Any help would be appreciated. Thanks > - T not 100% sure what you are after, but in the results view you can add report_id= to show only the results of the specific report. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS stopped working after nvt updates
Am Mittwoch, 1. Juni 2016, 15:13:32 schrieb Pawan Sood: > I was having an OpenVAS v7 installation which was working fine. > I updated the nvt by openvas-nvt-sync and everything went fine. > However, now whenever I create a task for scanning and fire it, the error > message is displayed as below: > Results of last operation > Operation: Start Task > Status Code: 503 > Status message: Service temporarily down > > All the required services are up and running. > I have also run the openvas-check-setup script which also reports that the > installation is fine. > > What could be the problem in my case? One problem might be that your certificates expired (check the logs). The other problem is that you are using an unsupported OpenVAS release. Please upgrade to version 8. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Merge two Openvas database from two different installation
Am Montag, 30. Mai 2016, 20:13:16 schrieb tatooin: > I am looking at merging two OpenVAS databases into one. Both databases > are installed currently in two different openVAS servers, and I would > like to have a global database to that everything is available to GSA in > one administration interface. > > There may be duplicates in the databases, but it's ok, I can do the > manual cleanup later. > > I tried to merge both sqlite DB using the following method: > > sqlite3 database1 .dump >fileall.sql > sqlite3 database2 .dump >>fileall.sql > sqlite3 database3 > But it doesn't appears to do the job properly, as the database3 contains > targets from database1 & database2, but raw data (reports) from > database2 are missing. > > Am I missing something ? (sorry I really don't know much about databases > in general) merging directly two databases is not supported and can get extremely hairy. Unless you know the entire datamodel blindly you should not try this. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVas Log
Am Freitag, 27. Mai 2016, 13:19:27 schrieb Ravi verma: > I have installed Openvas on Redhat 6.5 x86_64, But I am not able to scan > Host properly and also Vulnerability infect Item not showing in Openvas > generated report. > > I am attaching openvas check status log, Kindly check and revert. your log says: ERROR: OpenVAS Manager is NOT running! FIX: Start OpenVAS Manager (openvasmd). -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] openvasmd --rebuild takes forever
Am Montag, 23. Mai 2016, 16:47:05 schrieb tatooin: > I have a task which for some reason refuse to start... (GAS loads > forever but nothing happens...) > > I'm trying to rebuild my openvasmd database in case something is > corrupted, but the command openvasmd -v --rebuild takes forever and > nothing happens. No load on the system, and obviously no logs at all in > any of /var/log/openvas logfiles... > > Stracing the processes just show: > > root@kali-gis-eur:/var/log/openvas# ps -ef | grep openvasmd > <..snip...> > root 5057 4124 0 16:28 pts/000:00:00 openvasmd: Reloading > root 5058 5057 0 16:28 pts/000:00:01 openvasmd: Rebuilding > > root@kali-gis-eur:/var/log/openvas# strace -p 5057 > Process 5057 attached > waitpid(5058, > > root@kali-gis-eur:/var/log/openvas# strace -p 5058 > Process 5058 attached > recv(7, > > And nothing else... > > Is there anything else I can do to understand what's going on ? Maybe some communication problem with the scanner. Or maybe it just takes looong and "looong" you considered "forever" ;-) You could try --update instead of --rebuild. This will take even longer, but you should see some progress on the SecInfo->NVTs page. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Problem starting scan in OpenVAS 8
Am Donnerstag, 19. Mai 2016, 14:08:46 schrieb Deepak Jha: > I have installed OpenVAS 8 latest version using yum.Installation is > successful and when I run openvas-check-setup. It says openvas 8 > installation is OK. But when try to run scan I get the below error in > openvasmd.log > Lib auth: Authentication configuration not found > > And in GSA log I see error as below: > Gsad main: warning MHD: Error: received handshake message out of > context. > How can I fix this issue? Scan tasks are not starting hard to say with the given information. Please ensure you are you the latests check-setup script from the website. Maybe a certificate problem? Perhaps the package provider can assist better. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Error openvas-setup centos 6.7
Am Dienstag, 17. Mai 2016, 19:15:12 schrieb milad naebzadeh: > Connect server to portcol don't have problemAnd I installed for this order > yum -y install openvas "*redis*" > Difficult in step sync I am not familiar with the CentOS packages. Perhaps you get assistance from the package providers. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] wrong results scanning two tasks on same host
Am Montag, 16. Mai 2016, 13:59:21 schrieb Daniel Seichter: > For example: > If we scan each domain after another, I got in the scan result the entry: > WordPress User IDs and User Names Disclosure > > If we scan both domains at the same time, this entry is missing. > > Do I restart the scan only for one domain, that entry is reported again. > > Could this be a timeout issue? Have you checked the "Error Messages" section in the Report Results browser? If the scanner runs into timeouts, such will be reported there. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Reg My Sql Vulnerability
Am Freitag, 13. Mai 2016, 06:40:10 schrieb Sai Ravi: > Hi Team We did a vulnerability scan to our My SQL Database > servers and encountered the below vulnerability. MySQL Authentication Error > Message User Enumeration Vulnerability > > Vulnerability Detection Result > > The following users are enumerated > rootadmintest > As mentioned in the solution, we updated our MY SQL servers to latest > version 5.6.27.But still the mentioned vulnerability is getting reported. > > NOTE : It was also confirmed by Oracle support team that no vulnerability > exists in version 5.6.27 the best chances to get answers for scanning/detection issues is to send them to the openvas-plugins mailing list. The NVT developers might not always get aware of the questions here on the openvas-discuss mailing list. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Disabling Default SSH Credentials
Am Mittwoch, 11. Mai 2016, 11:49:53 schrieb Jorge R: > Even with all of the usernames that I deleted from that file, I still get > quite a few of default accounts that are still being used. > > # Username > ro > OpenVAS > support > 0 > karaf > root > nsroot > emailswitch > product > netscreen > cisco > mfg > panopta.admin > admin > cmc > rwa > HPSupport > > > How can I disable these? Any assistance would be greatly appreciated. well, for example panopta.admin should have a special result in your report which refers to NVT 1.3.6.1.4.1.25623.1.0.105431. You can create a new scan config, derived from Full & Fast where you disable all these NVTs. If you only care about the reporting, the you could create overrides for the NVTs so that they are marked as false positives. However, actually you should secure those services by disabling them or changing the passwords instead of not reporting about it. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] adding credentials error
Am Freitag, 29. April 2016, 20:37:47 schrieb glen mcmath: > When I try to save credentials in the targets credentials section I'm > getting an error of "Internal error: create_lsc_credential_omp:4822 (GSA > 6.0.5)" > > Where should I be looking to diagnose what the error is? /var/log/openvasmd.log will provide some more clue. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Load-Balance Between Scammers
Am Donnerstag, 28. April 2016, 10:28:36 schrieb TN TN: > If you have more than one OpenVAS scanner configured can you load-balance > the different scans to use different scanners? If so is that an automatic > process? When the one scanner fills up with requests, the other will take > over? Not sure how to distribute the load between 2+ scanners. Thanks -T as long as you talk about the same machine, OpenVAS Scanner does already load balancing across all available CPUs. You can fine-tune by configuring max_checks and max_hosts for the scan task. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] ERROR: The number of NVTs in the OpenVAS Manager database is too low.
Am Mittwoch, 27. April 2016, 15:39:39 schrieb Khürt L. Williams: > I am pulling my hair out getting this setup. can you check the log files of openvasmd and openvassd after you ran --rebuild ? Note that OpenVAS-9 is not supported yet. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Argh!!!
Am Mittwoch, 27. April 2016, 15:32:22 schrieb Khürt L. Williams: > I am pulling my hair out getting this setup. > > Distributor ID: Ubuntu Description: Ubuntu 14.04.4 LTS Release: 14.04 > Codename: trusty I am not using Ubuntu, but the package collection seems to mix several version of OpenVAS. And please remind that OpenVAS-9 is not supported yet. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] SMB Credentials & Authentication with domain user
Am Donnerstag, 21. April 2016, 13:41:12 schrieb Daniel Avila: > The issue here is that I cant see if the scan was done authenticated or > non-authenticated. In the Report Resuls view, you can select the host list from the menu and there is a column describing the success/failure state of authentication for each host. There is also a log entry about it in the results, but this can easily be overlooked. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Running openvas-scapdata-sync et.al. harmful?
Am Donnerstag, 21. April 2016, 10:02:42 schrieb Ralf Hildebrandt: > Can I run the openvas-scapdata-sync etc. during a scan? Or will that > cause inconsistencies in the scan? This will not break or in other ways negatively affect a running scan. Except that a scap update might consume CPU / Mem and thus make the machine slower. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] every scan ends with error in seconds
Am Dienstag, 19. April 2016, 19:13:33 schrieb hartlaub: > MyProblem: Openvas didnt scan; Status is done, Severity is error, scan runs > only 1s MyEnvironment: VirtualBoxVM, centos 7 min server, Openvas installed > via Atomicorp package, openvas-check-setup is ok. > > I'm totally at a loss, and hope you can give me the decisive tip? can you check the log files of manager and scanner (/var/log/openvas/)? There should be a hint about a problem. Maybe a certificate problem. -- Dr. Jan-Oliver Wagner | +49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
