Page 3 of 6

Re: [atomic] Openvas 4.x Updates

Posted: Fri May 06, 2011 4:02 pm
by xmichielx
Thanks for the tip, the newer version, is it already in the yum repo from atomic?
Following the new users steps I still got the old version and the same problem.

Re: [atomic] Openvas 4.x Updates

Posted: Fri May 06, 2011 4:32 pm
by xmichielx
Ah the update is there, seems better but now I receive the following errors when clicking on the NVT feed or try to run a scan;

in /var/log/openvassmd.log:

event task:MESSAGE:2011-05-06 20h30.15 utc :8131: Status of task test (eeca7541-c924-4e12-8fde-5d2bec7042b9) has changed to Requested
event task:MESSAGE:2011-05-06 20h30.16 utc :8131: Task eeca7541-c924-4e12-8fde-5d2bec7042b9 has been requested to start
lib serv:WARNING:2011-05-06 20h30.16 utc :8131: Failed to gnutls_bye: Error in the push function.

lib serv:WARNING:2011-05-06 20h30.18 utc :8133: openvas_server_connect: failed to connect to server: Broken pipe

lib serv:WARNING:2011-05-06 20h30.18 utc :8133: Failed to gnutls_bye: Error in the push function.

event task:MESSAGE:2011-05-06 20h30.18 utc :8133: Status of task test (eeca7541-c924-4e12-8fde-5d2bec7042b9) has changed to Stopped

Re: [atomic] Openvas 4.x Updates

Posted: Fri May 06, 2011 4:43 pm
by scott
Is that the right version? The atomic ones dont use /var/log/openvassmd.log

Re: [atomic] Openvas 4.x Updates

Posted: Fri May 06, 2011 4:55 pm
by xmichielx
sorry must be;
/var/log/openvas/openvasmd.log
&
/var/log/openvas/openvassd.log

error is in /var/log/openvas/openvasmd.log

Re: [atomic] Openvas 4.x Updates

Posted: Fri May 06, 2011 5:03 pm
by scott
Ok I saw that on another box, but it ended up scanning fine.

Re: [atomic] Openvas 4.x Updates

Posted: Fri May 06, 2011 7:29 pm
by xmichielx
If I click on the settings link or NVt link it gives me the following error:
{code}
Internal error: get_feed_oap:732

An internal error occurred while getting the feed list. The current list of feeds is not available. Diagnostics: Failure to connect to administrator daemon.
Also the scan says:
Stopped at 1 %

Looks like it still does not work?

edit when I try to resume the scan it says:

event auth:MESSAGE:2011-05-06 23h32.14 utc :8993: Authentication success for user admin (41200804-076c-4e56-a682-99ca5c083238)
md main:WARNING:2011-05-06 23h32.14 utc :8993: read_from_server: failed to read from server: A TLS packet with unexpected length was received.

event task:MESSAGE:2011-05-06 23h32.14 utc :8993: Status of task test (eeca7541-c924-4e12-8fde-5d2bec7042b9) has changed to Requested
event task:MESSAGE:2011-05-06 23h32.14 utc :8993: Task eeca7541-c924-4e12-8fde-5d2bec7042b9 has been resumed
lib serv:WARNING:2011-05-06 23h32.14 utc :8993: Failed to gnutls_bye: Error in the push function.

lib serv:WARNING:2011-05-06 23h32.16 utc :8995: openvas_server_connect: failed to connect to server: Broken pipe

lib serv:WARNING:2011-05-06 23h32.16 utc :8995: Failed to gnutls_bye: Error in the push function.

event task:MESSAGE:2011-05-06 23h32.16 utc :8995: Status of task test (eeca7541-c924-4e12-8fde-5d2bec7042b9) has changed to Stopped

Re: [atomic] Openvas 4.x Updates

Posted: Sun May 08, 2011 3:54 pm
by xmichielx
For some reason the connection to openvas-server stops (broken pipe) and the scan stops.
Everything seems to be running?!

tcp 0 0 0.0.0.0:9390 0.0.0.0:* LISTEN 8047/openvasmd
tcp 0 0 0.0.0.0:9391 0.0.0.0:* LISTEN 19245/openvassd: wa
tcp 0 0 127.0.0.1:9393 0.0.0.0:* LISTEN 20146/openvasad

Re: [atomic] Openvas 4.x Updates

Posted: Sun May 08, 2011 4:01 pm
by xmichielx
Might be a bug?

http://wald.intevation.org/tracker/inde ... 9&atid=220
I have the same error / hanging situation when I run the openvasmd --sport 9391 --port 9390 -d /tmp/tasks-import.db --rebuild command.

Re: [atomic] Openvas 4.x Updates

Posted: Tue May 10, 2011 8:02 am
by xmichielx
I am pretty stuck now :)

If I remove all files in /var/lib/openvas/mgr and do a

touch /var/lib/openvas/mgr/tasks.db
openvasmd --backup
strace openvasmd --rebuild

it just hangs..if I strace it I get:

getrusage(RUSAGE_SELF, {ru_utime={0, 70989}, ru_stime={0, 284956}, ...}) = 0
times({tms_utime=7, tms_stime=28, tms_cutime=0, tms_cstime=2}) = 429506782
gettimeofday({1305028907, 296573}, NULL) = 0
getrusage(RUSAGE_SELF, {ru_utime={0, 70989}, ru_stime={0, 284956}, ...}) = 0
times({tms_utime=7, tms_stime=28, tms_cutime=0, tms_cstime=2}) = 429506782
sendto(3, "\27\3\1\0\320*\365\213\326X\24`K\227\253\336\325\246\262\177\231\372f\323\230\3N\341\244uD\276"..., 213, 0, NULL, 0) = 213
select(4, [3], [], [3], {1, 0}) = 1 (in [3], left {0, 999998})
recvfrom(3, "", 5, 0, NULL, NULL) = 0
write(4, "md main:WARNING:2011-05-10 12h"..., 146) = 146
select(4, [], [], [3], {1, 0}) = 0 (Timeout)
select(4, [], [], [3], {1, 0}) = 0 (Timeout)
select(4, [], [], [3], {1, 0}) = 0 (Timeout)
select(4, [], [], [3], {1, 0}) = 0 (Timeout)
select(4, [], [], [3], {1, 0}) = 0 (Timeout)
select(4, [], [], [3], {1, 0}) = 0 (Timeout)
select(4, [], [], [3], {1, 0}) = 0 (Timeout)
select(4, [], [], [3], {1, 0}) = 0 (Timeout)
select(4, [], [], [3], {1, 0}) = 0 (Timeout)
select(4, [], [], [3], {1, 0}) = 0 (Timeout)
select(4, [], [], [3], {1, 0}) = 0 (Timeout)

Re: [atomic] Openvas 4.x Updates

Posted: Tue May 10, 2011 8:17 am
by scott
what version of sqlite are you running?

Re: [atomic] Openvas 4.x Updates

Posted: Tue May 10, 2011 8:25 am
by xmichielx
Hi Scott:

[mve@vps500 ~]$ rpm -qa | grep sqlite
sqlite-3.7.0.1-1.el5.art
sqlite-devel-3.7.0.1-1.el5.art
python-sqlite-1.1.7-1.2.1
sqlite-3.7.0.1-1.el5.art
[mve@vps500 ~]$ rpm -qa | grep openvas
openvas-libraries-4.0.4-1.el5.art
openvas-scanner-3.2.3-1.el5.art
openvas-cli-1.1.2-2.el5.art
openvas-1.0-0.5.el5.art
openvas-glib2-2.22.5-1.el5.art
openvas-manager-2.0.3-3.el5.art
openvas-administrator-1.1.1-2.el5.art
[mve@vps500 ~]$ rpm -qa | grep green
greenbone-security-assistant-2.0.1-3.el5.art
[mve@vps500 ~]$

Re: [atomic] Openvas 4.x Updates

Posted: Tue May 10, 2011 8:39 am
by scott
So its not sqlite then, unless you have some source installs on the system? I recall their being a locking problem with sqlite before 3.5 or 3.6

Re: [atomic] Openvas 4.x Updates

Posted: Tue May 10, 2011 8:54 am
by xmichielx
Hi Scott,

No source tarbal installs or whatsoever.

Re: [atomic] Openvas 4.x Updates

Posted: Tue May 10, 2011 10:45 am
by xmichielx
Allright I cleaned all configs and packages so I start new on my CentOS 5.6 64 bit box:

yum -y install openvas:

Dependencies Resolved

===============================================================================================================================================================================================================================================
Package Arch Version Repository Size
===============================================================================================================================================================================================================================================
Installing:
openvas noarch 1.0-0.5.el5.art atomic 2.5 k
Installing for dependencies:
greenbone-security-assistant x86_64 2.0.1-3.el5.art atomic 397 k
openvas-cli x86_64 1.1.2-2.el5.art atomic 13 k
openvas-glib2 x86_64 2.22.5-1.el5.art atomic 1.7 M
openvas-libraries x86_64 4.0.4-1.el5.art atomic 905 k
openvas-manager x86_64 2.0.3-3.el5.art atomic 262 k
openvas-scanner x86_64 3.2.3-1.el5.art atomic 166 k

Transaction Summary
===============================================================================================================================================================================================================================================
Install 7 Package(s)
Upgrade 0 Package(s)

Total download size: 3.4 M
Downloading Packages:
(1/7): openvas-1.0-0.5.el5.art.noarch.rpm | 2.5 kB 00:00
(2/7): openvas-cli-1.1.2-2.el5.art.x86_64.rpm | 13 kB 00:00
(3/7): openvas-scanner-3.2.3-1.el5.art.x86_64.rpm | 166 kB 00:00
(4/7): openvas-manager-2.0.3-3.el5.art.x86_64.rpm | 262 kB 00:00
(5/7): greenbone-security-assistant-2.0.1-3.el5.art.x86_64.rpm | 397 kB 00:00
(6/7): openvas-libraries-4.0.4-1.el5.art.x86_64.rpm | 905 kB 00:00
(7/7): openvas-glib2-2.22.5-1.el5.art.x86_64.rpm | 1.7 MB 00:00
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total 2.3 MB/s | 3.4 MB 00:01
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
Installing : openvas-libraries 1/7
Installing : openvas-manager 2/7
/bin/touch: cannot touch `/var/lib/openvas/mgr/tasks.db': No such file or directory
Installing : openvas-scanner 3/7
Installing : openvas-cli 4/7
Installing : openvas-glib2 5/7
Installing : greenbone-security-assistant 6/7
Installing : openvas 7/7
error reading information on service openvas-administrator: No such file or directory
Starting greenbone-security-assistant: [ OK ]

Installed:
openvas.noarch 0:1.0-0.5.el5.art

Seems that 2 things are going wrong: the tasks.db file and the administrator package.

What can i do best now after these errors?
Manually fix them by:
yum -y install openvas-administrator && touch /var/lib/openvas/mgr/tasks.db

BTW the file is there:
file /var/lib/openvas/mgr/tasks.db
/var/lib/openvas/mgr/tasks.db: SQLite database (Version 3)

It has just been created,.

Re: [atomic] Openvas 4.x Updates

Posted: Tue May 10, 2011 10:55 am
by xmichielx
Again a little bit further, openvasmd --rebuild works, user has been created etc..
Now the openvas-check tool gives:

Step 6: Checking Greenbone Security Desktop (GSD) ...
ERROR: No Greenbone Security Desktop (gsd) found or too old.
FIX: Please install Greenbone Security Desktop 1.1.0.

ERROR: Your OpenVAS-4 installation is not yet complete!

Please follow the instructions marked with FIX above and run this
script again.

If you think this result is wrong, please report your observation
and help us to improve this check routine:
http://lists.wald.intevation.org/mailma ... as-discuss
Please attach the log-file (/tmp/openvas-check-setup.log) to help us analyze the problem.

[root@vps500 mgr]# /etc/init.d/g
gpm gsad
[root@vps500 mgr]# /etc/init.d/gsad status
gsad (pid 4106) is running...
[root@vps500 mgr]# yum search greenbone
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* atomic: www7.atomicorp.com
* base: ftp.tudelft.nl
* extras: ftp.tudelft.nl
* rpmforge: apt.sw.be
* updates: ftp.tudelft.nl
Excluding Packages from CentOS / Red Hat Enterprise Linux 5 - atomicrocketturtle.com
Finished
Excluding Packages from CentOS / Red Hat Enterprise Linux
Finished
Excluding Packages from CentOS-5 - Base
Finished
Excluding Packages from RHEL 5 - RPMforge.net - dag
Finished
Excluding Packages from CentOS-5 - Updates
Finished
============================================================================================================= Matched: greenbone ==============================================================================================================
greenbone-security-assistant.x86_64 : GSA
openvas-manager.x86_64 : The Open Vulnerability Assessment (OpenVAS) Manager

I understand this package is not in the atomic repositories and I don't need it for remote web scans?