Hi
More one question about nessus and pf.
This logs below, show if have problems?
Jan 11 15:42:34 packetfence pfqueue: pfqueue(14676) INFO:
[mac:1c:39:47:0b:7d:c6] Calling violation_trigger for ip: 172.16.0.12, mac:
1c:39:47:0b:7d:c6, type: nessus6, trigger: 104743
(pf::scan::parse_scan_report)
Jan 11 15:42:36 packetfence packetfence_httpd.webservices:
httpd.webservices(13421) WARN: [mac:1c:39:47:0b:7d:c6] Use of uninitialized
value in pattern match (m//) at /usr/local/pf/lib/pf/violation.pm line 792.
(pf::violation::violation_close)
Jan 11 15:42:36 packetfence packetfence_httpd.webservices:
httpd.webservices(13421) WARN: [mac:1c:39:47:0b:7d:c6] Use of uninitialized
value $max in numeric le (<=) at /usr/local/pf/lib/pf/violation.pm line 800.
(pf::violation::violation_close)
Jan 11 15:42:36 packetfence packetfence_httpd.webservices:
httpd.webservices(13421) INFO: [mac:1c:39:47:0b:7d:c6] violation 1 closed
for 1c:39:47:0b:7d:c6 (pf::violation::violation_close)
Jan 11 15:42:36 packetfence packetfence_httpd.webservices:
httpd.webservices(13421) WARN: [mac:1c:39:47:0b:7d:c6] Use of uninitialized
value $grace in numeric eq (==) at /usr/local/pf/lib/pf/api.pm line 1012.
(pf::api::close_violation)
Regards,
André
2018-01-11 14:40 GMT-03:00 André Scrivener <andr3.scrive...@gmail.com>:
> Hello Fabrice,
>
> 1 more point! :)
>
> Problem solved after update perl-Net-Nessus-REST.
>
> Thank you!
>
>
>
> PS: Follow version for other people troubleshooting.
>
> This version below the scan if your choose scan engine (nessus6) in
> compliance menu.
>
> Nessus version: 7
>
> perl-Net-Nessus-REST-0.7.0-2.1.noarch
>
>
> Regards,
> André
>
> 2018-01-11 12:33 GMT-03:00 Fabrice Durand <fdur...@inverse.ca>:
>
>> Hello André,
>>
>> i have uploaded a new perl nessus library in the repo.
>>
>> Can you try to do: yum update perl-Net-Nessus-REST
>> --enablerepo=packetfence
>> and retry (restart packetfence first).
>>
>> Regards
>> Fabrice
>>
>>
>> Le 2018-01-11 à 09:08, André Scrivener a écrit :
>>
>> Hello Fabrice,
>>
>> after change to nessus6, received this logs:
>>
>>
>> Jan 11 11:37:34 packetfence pfqueue: pfqueue(18220) ERROR:
>> [mac:84:7b:eb:e5:ea:e2] Can't locate object method "get_scanner_id" via
>> package "Net::Nessus::REST" at /usr/local/pf/lib/pf/scan/nessus6.pm line
>> 109.
>> (pf::api::can_fork::notify)
>>
>>
>> Here is my scan.conf
>>
>> [root@packetfence ~]# cat /usr/local/pf/conf/scan.conf
>> [nessus-test]
>> ip=172.16.0.4
>> verify_hostname=disabled
>> scannername=Local Scanner
>> duration=
>> categories=default
>> port=8834
>> registration=1
>> username=admin
>> post_registration=1
>> password=admin
>> pre_registration=1
>> oses=5474,2,202,1,192,193
>> nessus_clientpolicy=packetfence
>> type=nessus6
>> [root@packetfence ~]#
>>
>>
>>
>> My config Nessus:
>>
>>
>> Name Scanner:
>>
>> https://imgur.com/kUxVsAy
>>
>>
>> Policy Scanner:
>>
>> https://imgur.com/G4FWllf
>>
>>
>> I saw this same problem on this by link https://goo.gl/syFQ8B, but I
>> noticed that the error line is different, I prefer your opinion. :)
>>
>>
>>
>> Regards,
>>
>> André
>>
>>
>>
>> 2018-01-10 20:50 GMT-03:00 Durand fabrice <fdur...@inverse.ca>:
>>
>>> Hello André,
>>>
>>> so you have to choose nessus6 and not nessus.
>>>
>>> Restart
>>>
>>> Fabrice
>>>
>>>
>>>
>>> Le 2018-01-10 à 17:53, André Scrivener a écrit :
>>>
>>> Hello Fabrice,
>>>
>>> Last version for centos 7!
>>>
>>> Version is Nessus 7.
>>>
>>> Regards,
>>> André
>>>
>>> Em 10 de jan de 2018, às 18:14, Fabrice Durand via PacketFence-users <
>>> packetfence-users@lists.sourceforge.net> escreveu:
>>>
>>> Hello André,
>>>
>>> what is the version of nessus ?
>>>
>>> Regards
>>>
>>> Fabrice
>>>
>>>
>>>
>>> Le 2018-01-10 à 15:59, André Scrivener via PacketFence-users a écrit :
>>>
>>> Hey guys!
>>>
>>>
>>> I'm enabling nessus to scan hosts, but I'm trying out these logs below:
>>>
>>>
>>> Jan 10 18:33:25 packetfence pfqueue: pfqueue(12693) INFO:
>>> [mac:84:7b:eb:e5:ea:e2] Instantiate profile default
>>> (pf::Connection::ProfileFactory::_from_profile)
>>> Jan 10 18:33:26 packetfence pfqueue: pfqueue(12693) INFO:
>>> [mac:84:7b:eb:e5:ea:e2] violation 1200005 already exists for
>>> 84:7b:eb:e5:ea:e2, not adding again (pf::violation::violation_add)
>>> Jan 10 18:33:26 packetfence pfqueue: pfqueue(12693) INFO:
>>> [mac:84:7b:eb:e5:ea:e2] Instantiate profile default
>>> (pf::Connection::ProfileFactory::_from_profile)
>>> Jan 10 18:33:26 packetfence pfqueue: pfqueue(12693) INFO:
>>> [mac:84:7b:eb:e5:ea:e2] New ID generated: 151561640696eae2
>>> (pf::util::generate_id)
>>> Jan 10 18:33:27 packetfence pfqueue: pfqueue(12693) ERROR:
>>> [mac:84:7b:eb:e5:ea:e2] Can't use string ("") as a HASH ref while "strict
>>> refs" in use at /usr/share/perl5/vendor_perl/Net/Nessus/XMLRPC.pm line
>>> 666.
>>> (pf::api::can_fork::notify)
>>>
>>>
>>> I looked in the documentation for something about XMLRPC and Nessus, but
>>> I could not do the patching.
>>>
>>> Can you help me with this?
>>>
>>> Regards
>>>
>>>
>>> --
>>> Att
>>> *André*
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Check out the vibrant tech community on one of the world's most
>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>>
>>>
>>>
>>> _______________________________________________
>>> PacketFence-users mailing
>>> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>>>
>>>
>>> --
>>> Fabrice durandfdur...@inverse.ca :: +1.514.447.4918 (x135) ::
>>> www.inverse.ca
>>> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
>>> (http://packetfence.org)
>>>
>>> ------------------------------------------------------------
>>> ------------------
>>> Check out the vibrant tech community on one of the world's most
>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>>
>>> _______________________________________________
>>> PacketFence-users mailing list
>>> PacketFence-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>>
>>>
>>>
>>
>>
>> --
>>
>>
>> --
>> Fabrice durandfdur...@inverse.ca :: +1.514.447.4918 (x135) ::
>> www.inverse.ca
>> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
>> (http://packetfence.org)
>>
>>
>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
