Re: [Openvas-discuss] Openvas-discuss Openvas 7 Installation error on CentOS 6.5
Am Dienstag, 14. Oktober 2014, 15:25:37 schrieb Shwetank Sharma: I am trying to compile openvas 7 from source. All packages are compiled successfully. But when I tried to sync NVT every time I got the error mentioned below. openvas-nvt-sync openvassd: error while loading shared libraries: libopenvas_misc.so.7: cannot open shared object file: No such file or directory I think this should be addressed first. Maybe you need a LD_LIBRARY_PATH to where you installed the libs. The path needs to be known by the environment that calls openvassd. -- Dr. Jan-Oliver Wagner | ++49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS 7 installation
Am Freitag, 24. Oktober 2014, 19:58:11 schrieb Dominguez, Roland: Thanks everyone for the advice. Here's what I did. I exported one of the included scans as an XML file. Created a new scan and imported the XML file. Them I modified the ping host section to TCP based pings. Is this the proper method of solving the ICMP problem, where ICMP is blocked on a network? hm, very complicated method. If you simply change the Aive Test for the target in GSA, it is easier. Also, if there is some other than using the scan config default, the Value you enter manually to the scan config (like with your method above) gets overwritten. -- Dr. Jan-Oliver Wagner | ++49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS 7 installation
You may need to play around with the Alive Test, which by default is an icmp ping AFAIK. 23.10.201421:58:16Openvas-discuss openvas-discuss-boun...@wald.intevation.org wrote on 23.10.2014 21:58:16: From: Dominguez, Roland Rolan d.doming...@tamucc.edu To: openvas-discuss@wald.intevation.org openvas- discuss @wald.intevation.org, Date: 23.10.2014 22:12 Subject: [Openvas-discuss] OpenVAS 7 installation Sent by: Openvas-discuss openvas-discuss-bounc e...@wald.intevation.org I'm new to OpenVAS. I've installed OpenVAS -7 on a centOS 6.5 server and my scans to the local network return results. When I attempt to scan outside of the network I have 0 results returned. Nmap on the same server is able to scan servers outside of the network. What should I check?___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS 7 installation
You may need to play around with the Alive Test, which by default is an icmp ping AFAIK. Yes, thats correct since OpenVAS7 http://lists.wald.intevation.org/pipermail/openvas-discuss/2014-October/007022.html http://lists.wald.intevation.org/pipermail/openvas-discuss/2014-October/006953.html http://openvas.org/news_archive.html#openvas7 ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS 7 installation
Thanks everyone for the advice. Here's what I did. I exported one of the included scans as an XML file. Created a new scan and imported the XML file. Them I modified the ping host section to TCP based pings. Is this the proper method of solving the ICMP problem, where ICMP is blocked on a network? -Original Message- From: Openvas-discuss [mailto:openvas-discuss-boun...@wald.intevation.org] On Behalf Of Chris Sent: Friday, October 24, 2014 1:49 AM To: openvas-discuss@wald.intevation.org Subject: Re: [Openvas-discuss] OpenVAS 7 installation You may need to play around with the Alive Test, which by default is an icmp ping AFAIK. Yes, thats correct since OpenVAS7 http://lists.wald.intevation.org/pipermail/openvas-discuss/2014-October/007022.html http://lists.wald.intevation.org/pipermail/openvas-discuss/2014-October/006953.html http://openvas.org/news_archive.html#openvas7 ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] OpenVAS 7 installation
I'm new to OpenVAS. I've installed OpenVAS -7 on a centOS 6.5 server and my scans to the local network return results. When I attempt to scan outside of the network I have 0 results returned. Nmap on the same server is able to scan servers outside of the network. What should I check? ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS 7 installation
Is selinux disabled? Is iptables disabled? This might also be related to option that marks host as dead if it doesn't respond to ping and stop scanning. Eero 23.10.2014 23.13 kirjoitti Dominguez, Roland roland.doming...@tamucc.edu : I'm new to OpenVAS. I've installed OpenVAS -7 on a centOS 6.5 server and my scans to the local network return results. When I attempt to scan outside of the network I have 0 results returned. Nmap on the same server is able to scan servers outside of the network. What should I check? ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] Openvas-discuss Openvas 7 Installation error on CentOS 6.5
Hello, I am trying to compile openvas 7 from source. All packages are compiled successfully. But when I tried to sync NVT every time I got the error mentioned below. openvas-nvt-sync openvassd: error while loading shared libraries: libopenvas_misc.so.7: cannot open shared object file: No such file or directory [i] This script synchronizes an NVT collection with the 'OpenVAS NVT Feed'. [i] The 'OpenVAS NVT Feed' is provided by 'The OpenVAS Project'. [i] Online information about this feed: 'http://www.openvas.org/openvas-nvt-feed.html'. [i] NVT dir: [w] Could not determine feed version. [i] rsync is not recommended for the initial sync. Falling back on http. [i] Will use wget [i] Using GNU wget: /usr/bin/wget [i] Configured NVT http feed: http://www.openvas.org/openvas-nvt-feed-current.tar.bz2 [i] Downloading to: /tmp/openvas-nvt-sync.DHftlpPySS/openvas-feed-2014-10-14-304.tar.bz2 mkdir: cannot create directory `': No such file or directory [i] Checking dir: ok [i] Checking MD5 checksum: /usr/bin/md5sum: /md5sums: No such file or directory not ok Error: md5sums not correct. Your NVT collection might be broken now. Please try this for details: cd ; /usr/bin/md5sum -c /md5sums | less I have followed the given link for reference. http://elatov.github.io/2014/06/compile-openvas-7-on-centos-6/ Also I have tried as many solution given on internet but no luck. Regards, Shwetank ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] OpenVAS-7 installation on centos
W dniu 01.08.2014 o 12:25, flymolon pisze: Hi All, I installed Openvas-7 on CentOS 6.5 x64 from the source codes couple of hours ago, and here's some libs it depends I installed: libpcap-1.6.1, libmicrohttpd-0.9.16, gmp-4.3.1, gpgme-1.1.2, libffi-3.1, openldap-2.4.11, e2fsprogs-1.42.11, nettle-2.7, glib-2.29.10, gnutls-2.12.0... after the installation I checked with the script openvas-check-setup step by step, at last it showed: Step 1: Checking OpenVAS Scanner ... OK: OpenVAS Scanner is present in version 4.0.1. OK: OpenVAS Scanner CA Certificate is present as /usr/local/var/lib/openvas/CA/cacert.pem. OK: NVT collection in /usr/local/var/lib/openvas/plugins contains 35685 NVTs. WARNING: Signature checking of NVTs is not enabled in OpenVAS Scanner. SUGGEST: Enable signature checking (see http://www.openvas.org/trusted-nvts.html). OK: The NVT cache in /usr/local/var/cache/openvas contains 35685 files for 35685 NVTs. Step 2: Checking OpenVAS Manager ... OK: OpenVAS Manager is present in version 5.0.2. OK: OpenVAS Manager client certificate is present as /usr/local/var/lib/openvas/CA/clientcert.pem. OK: OpenVAS Manager database found in /usr/local/var/lib/openvas/mgr/tasks.db. OK: Access rights for the OpenVAS Manager database are correct. OK: sqlite3 found, extended checks of the OpenVAS Manager installation enabled. OK: OpenVAS Manager database is at revision 123. OK: OpenVAS Manager expects database at revision 123. OK: Database schema is up to date. ERROR: The number of NVTs in the OpenVAS Manager database is too low. FIX: Make sure OpenVAS Scanner is running with an up-to-date NVT collection and run 'openvasmd --rebuild'. WARNING: OpenVAS Scanner is NOT running! SUGGEST: Start OpenVAS Scanner (openvassd). ERROR: Your OpenVAS-7 installation is not yet complete! The openvassd process was still running and waiting for incoming connections, and the log /usr/local/var/log/openvas/openvasmd.log generated after execution of 'openvasmd --rebuild' showed: md main:MESSAGE:2014-07-28 18h44.13 utc:24867: No SCAP database found md main:MESSAGE:2014-07-28 18h44.13 utc:24867: No CERT database found lib serv:WARNING:2014-07-28 18h44.14 utc:24867: Failed to shake hands with peer: A TLS packet with unexpected length was received. lib serv:WARNING:2014-07-28 18h44.14 utc:24867: Failed to shutdown server socket md main:CRITICAL:2014-07-28 18h44.14 utc:24867: update_or_rebuild_nvt_cache: failed to connect to scanner lib serv:WARNING:2014-07-28 18h44.14 utc:24867:Failed to gnutls_bye: GnuTLS internal error. thx! ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss Hi Did you run openvas-setup ? -- Marcin Suchocki GPG: 0x780A750E 1150 69B6 6A8C DBAD D26D 0C8E 5960 72C7 780A 750E ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] OpenVAS-7 installation on centos
Hi All, I installed Openvas-7 on CentOS 6.5 x64 from the source codes couple of hours ago, and here's some libs it depends I installed: libpcap-1.6.1, libmicrohttpd-0.9.16, gmp-4.3.1, gpgme-1.1.2, libffi-3.1, openldap-2.4.11, e2fsprogs-1.42.11, nettle-2.7, glib-2.29.10, gnutls-2.12.0... after the installation I checked with the script openvas-check-setup step by step, at last it showed: Step 1: Checking OpenVAS Scanner ... OK: OpenVAS Scanner is present in version 4.0.1. OK: OpenVAS Scanner CA Certificate is present as /usr/local/var/lib/openvas/CA/cacert.pem. OK: NVT collection in /usr/local/var/lib/openvas/plugins contains 35685 NVTs. WARNING: Signature checking of NVTs is not enabled in OpenVAS Scanner. SUGGEST: Enable signature checking (see http://www.openvas.org/trusted-nvts.html). OK: The NVT cache in /usr/local/var/cache/openvas contains 35685 files for 35685 NVTs. Step 2: Checking OpenVAS Manager ... OK: OpenVAS Manager is present in version 5.0.2. OK: OpenVAS Manager client certificate is present as /usr/local/var/lib/openvas/CA/clientcert.pem. OK: OpenVAS Manager database found in /usr/local/var/lib/openvas/mgr/tasks.db. OK: Access rights for the OpenVAS Manager database are correct. OK: sqlite3 found, extended checks of the OpenVAS Manager installation enabled. OK: OpenVAS Manager database is at revision 123. OK: OpenVAS Manager expects database at revision 123. OK: Database schema is up to date. ERROR: The number of NVTs in the OpenVAS Manager database is too low. FIX: Make sure OpenVAS Scanner is running with an up-to-date NVT collection and run 'openvasmd --rebuild'. WARNING: OpenVAS Scanner is NOT running! SUGGEST: Start OpenVAS Scanner (openvassd). ERROR: Your OpenVAS-7 installation is not yet complete! The openvassd process was still running and waiting for incoming connections, and the log /usr/local/var/log/openvas/openvasmd.log generated after execution of 'openvasmd --rebuild' showed: md main:MESSAGE:2014-07-28 18h44.13 utc:24867: No SCAP database found md main:MESSAGE:2014-07-28 18h44.13 utc:24867: No CERT database found lib serv:WARNING:2014-07-28 18h44.14 utc:24867: Failed to shake hands with peer: A TLS packet with unexpected length was received. lib serv:WARNING:2014-07-28 18h44.14 utc:24867: Failed to shutdown server socket md main:CRITICAL:2014-07-28 18h44.14 utc:24867: update_or_rebuild_nvt_cache: failed to connect to scanner lib serv:WARNING:2014-07-28 18h44.14 utc:24867:Failed to gnutls_bye: GnuTLS internal error. thx!___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
