Re: [Openvas-discuss] Maximum attachment length
Thank you very much, that was the problem. Have a nice day, S. Uzun On 18 August 2015 at 15:28, matthew.mund...@greenbone.net wrote: Maybe make sure all previous openvasmd's are killed. Do you mean that I need to shutdown openvasmd before entering the command ? If so, I think here's my problem. Yes, you have to pass those options to the actual demon command (the command you run to start openvasmd). 0 means any size. Ok thanks, I'll try with 0 too. But note that man openvasmd says: 0 to use the default, negative to allow any size. I don't think that's true any more. I'll take a look, thanks. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] Maximum attachment length
Hello everyone, I got a report that exceeds the default 1MB limit. So, I tried to extend this limit to 15MB: openvasmd --max-email-attachment-size=15728640 openvasmd --max-email-include-size=15728640 But again, I got Note: The report exceeds the maximum attachment length of 1048576 bytes. in the next try. So, I tried to permit any size with a negative value: openvasmd --max-email-attachment-size=-1 openvasmd --max-email-include-size=-1 Same result unfortunately. Do I need to do something else ? Thanks in advance for your time and answer. --- Additional information: OpenVAS 7 Debian Jessie No problem in logs I get my report when it does not exceed 1MB --- Best regards, S. Uzun ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] Openvas 7 - Can't see others tasks
Hi, It's not possible to see others tasks or I'm doing something wrong ? Thanks in advance. Best regards, S. Uzun ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Strange results when trying to get all reports
Hello, I'm trying to get around this problem by trying to do something else : is it possible to send an alert with 2 reports format in one email ? Like, one TXT included report and one attached PDF report. (It's seems not but I'd like to have confirmation). Best regards, S. Uzun On 20 March 2015 at 16:13, Selam Uzun selam.u...@gmail.com wrote: Thanks for your suggestions Matthew. I changed the egrep with xmlstarlet and added the filter. Unfortunately, nothing changed. It's really strange, I tried some other combinations : when I have 2 high severity reports, the 2 reports gives me wrong informations: IP,Hostname, ,CVSS,Severity,High,Medium,Low,Log,False Positive,Total 127.0.0.1, ,0.0,None,0,0,0,10,0,10 IP,Hostname, ,CVSS,Severity,High,Medium,Low,Log,False Positive,Total 127.0.0.1, ,0.0,None,0,0,0,10,0,10 When I have 2 medium severity reports, the 2 reports gives me the good informations: IP,Hostname, ,CVSS,Severity,High,Medium,Low,Log,False Positive,Total 127.0.0.1, ,4.3,Medium,0,2,0,7,0,9 IP,Hostname, ,CVSS,Severity,High,Medium,Low,Log,False Positive,Total 127.0.0.1, ,4.3,Medium,0,2,0,7,0,9 It's like, whenever I have a high severity reports and I try to get it with GET_REPORTS, without providing an id, I get wrong informations. Best regards, S. Uzun On 20 March 2015 at 12:03, Matthew Mundell matthew.mund...@greenbone.net wrote: - #!/bin/sh # Description: import of all reports generated by OpenVAS IMPORT_FILE=openvas_reports.csv # csv format id REPORT_FORMAT_ID=9087b18c-626c-11e3-8892-406186ea4fc5 # Get reports omp -u admin -w admin -X ' get_reports format_id='$REPORT_FORMAT_ID'/ Try adding a filter to the GET_REPORTS, like filter=rows=-1 levels=hmlg, or whatever filter you're using in GSA. ' | egrep -o 'SVAsSG9zdG5hbWUsT1M[[:alnum:]]+' \ You could use something like this instead: ' | xmlstarlet sel -t -v /get_reports_response/report/text\(\) | base64 -d $IMPORT_FILE - -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] Strange results when trying to get all reports
Hallo, It's me again, sorry ^^ (thanks again for the previous answers). I have a weird result that I can't explain but I think it's a base64 encoding/decoding problem. I'd like to have your opinion. My aim is simple : I want to get all reports in CSV and in one file. I have this : - #!/bin/sh # Description: import of all reports generated by OpenVAS IMPORT_FILE=openvas_reports.csv # csv format id REPORT_FORMAT_ID=9087b18c-626c-11e3-8892-406186ea4fc5 # Get reports omp -u admin -w admin -X ' get_reports format_id='$REPORT_FORMAT_ID'/ ' | egrep -o 'SVAsSG9zdG5hbWUsT1M[[:alnum:]]+' \ | base64 -d $IMPORT_FILE - The egrep may seems a bit...meh but since all CSV reports start like this in base64 I though it would make the deal. I made a scan in GSA and I got a high severity (7.5), 1 high, 4 medium, 0 low, 15 log. When I run the script I get : IP,Hostname,OS,Scan Start,Scan End,CVSS,Severity,High,Medium,Low,Log,False Positive,Total 127.0.0.1, ,*0.0,None,0,0,0,10,0,10* I though I made a mistake in the script but I made another scan in GSA and I got a medium severity (4.3), 0 high, 2 medium, 0 low, 7 log (I turned off the service that generate the high vulnerability). When I run the script, I get good results for the medium severity only: IP,Hostname,OS,Scan Start,Scan End,CVSS,Severity,High,Medium,Low,Log,False Positive,Total 127.0.0.1, , *0.0,None,0,0,0,10,0,10 * IP,Hostname,OS,Scan Start,Scan End,CVSS,Severity,High,Medium,Low,Log,False Positive,Total 127.0.0.1, ,*4.3,Medium,0,2,0,7,0,9* In a terminal I tried, first, to get the high severity report in csv : get_reports_response status_text=OK status=200... extension=csv type=scan content_type=text/csvBLABLABLAownername I decoded the BLABLABLA part and *that was the good information:*IP,Hostname,OS,Scan Start,Scan End,CVSS,Severity,High,Medium,Low,Log,False Positive,Total 127.0.0.1, ,*7.5,High,1,4,0,15,0,20* Then, always in the terminal, I tried to get all reports (the high and the medium) in CSV: get_reports_response status_text=OK status=200... extension=csv type=scan content_type=text/csvFIRSTBLABLAownername ... extension=csv type=scan content_type=text/csvSECONDBLABLAownername FIRSTBLABLA correspond to the high severity report and when decoded it gives *wrong information* = *0.0,None,0,0,0,10,0,10* SECONDBLABLA correspond to the medium severity report and when decoded it gives *good information =* *4.3,Medium,0,2,0,7,0,9* And now, I have X-files generic music in my mind. Some additional informations : Kali 1.1.0-amd64 OpenVAS-7 (scanner 4.0.2, Manager 5.0.2, GSA 5.0.1, CLI 1.3.0) Everything works fine, nothing particular in logs I tried with TXT format, same result : when I import one by one, no problem. When I import all (the high and medium) I get wrong information for the high. If you have an idea, please let me know. Thanks a lot in advance for your time. Best regards, S. Uzun ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Strange results when trying to get all reports
Thanks for your suggestions Matthew. I changed the egrep with xmlstarlet and added the filter. Unfortunately, nothing changed. It's really strange, I tried some other combinations : when I have 2 high severity reports, the 2 reports gives me wrong informations: IP,Hostname, ,CVSS,Severity,High,Medium,Low,Log,False Positive,Total 127.0.0.1, ,0.0,None,0,0,0,10,0,10 IP,Hostname, ,CVSS,Severity,High,Medium,Low,Log,False Positive,Total 127.0.0.1, ,0.0,None,0,0,0,10,0,10 When I have 2 medium severity reports, the 2 reports gives me the good informations: IP,Hostname, ,CVSS,Severity,High,Medium,Low,Log,False Positive,Total 127.0.0.1, ,4.3,Medium,0,2,0,7,0,9 IP,Hostname, ,CVSS,Severity,High,Medium,Low,Log,False Positive,Total 127.0.0.1, ,4.3,Medium,0,2,0,7,0,9 It's like, whenever I have a high severity reports and I try to get it with GET_REPORTS, without providing an id, I get wrong informations. Best regards, S. Uzun On 20 March 2015 at 12:03, Matthew Mundell matthew.mund...@greenbone.net wrote: - #!/bin/sh # Description: import of all reports generated by OpenVAS IMPORT_FILE=openvas_reports.csv # csv format id REPORT_FORMAT_ID=9087b18c-626c-11e3-8892-406186ea4fc5 # Get reports omp -u admin -w admin -X ' get_reports format_id='$REPORT_FORMAT_ID'/ Try adding a filter to the GET_REPORTS, like filter=rows=-1 levels=hmlg, or whatever filter you're using in GSA. ' | egrep -o 'SVAsSG9zdG5hbWUsT1M[[:alnum:]]+' \ You could use something like this instead: ' | xmlstarlet sel -t -v /get_reports_response/report/text\(\) | base64 -d $IMPORT_FILE - -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] Mail subject of alerts
Hi, A quick question, is it possible to change the subject of alerts ? Theoretically it's a call to sendmail, so yes I guess ? Best regards, S. Uzun ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Report format creation
Edit : sorry my bad ! The initial pdf report format is still working. But I've tried with simple_pie_chart, same problem. Best regards, S. Uzun 2015-03-04 17:24 GMT+01:00 Selam Uzun selam.u...@gmail.com: Hi, I have a little problem with the report format creation. Apart from that, everything seems to work smoothly. I wanted to create a simplified version of the initial pdf report format, my aim is to keep just the host summary part, nothing fancy. So, I followed this : https://svn.wald.intevation.org/svn/openvas/trunk/openvas-manager/doc/report-format-HOWTO . Everything was ok (xml generation ok, import in gsa ok, verification ok) until the point where I select the new created format in my alert and I click the test button : Results of last operation Operation: Test Alert Status code: 500 Status message: Internal error If I select another report format for the same alert, there is no problem, I get my report. The fun part, now the initial pdf report format no longer works (same error). Am I the only one with this problem ? I'm a bit out of solution now :'( Best regards, S. Uzun ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] Report format creation
Hi, I have a little problem with the report format creation. Apart from that, everything seems to work smoothly. I wanted to create a simplified version of the initial pdf report format, my aim is to keep just the host summary part, nothing fancy. So, I followed this : https://svn.wald.intevation.org/svn/openvas/trunk/openvas-manager/doc/report-format-HOWTO . Everything was ok (xml generation ok, import in gsa ok, verification ok) until the point where I select the new created format in my alert and I click the test button : Results of last operation Operation: Test Alert Status code: 500 Status message: Internal error If I select another report format for the same alert, there is no problem, I get my report. The fun part, now the initial pdf report format no longer works (same error). Am I the only one with this problem ? I'm a bit out of solution now :'( Best regards, S. Uzun ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
