[Openvas-discuss] WMI Mantis 52166 bug, what is it ?

2017-05-28 Thread Sebastien Aucouturier
); what is this reference to Mantis 52166 bug ? where to get more info and news about the fix ? Thanks a lot. Sebastien Aucouturier ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman

[Openvas-discuss] how/why plugin are set to 'False positif' by manager

2017-03-15 Thread Sebastien Aucouturier
cli ? if no, how the FP is evaluate ? how can i avoid that ? Help greatly appreciate. Sebastien Aucouturier , VP Engineer and Senior Technologist, ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.o

Re: [Openvas-discuss] how to Get vulnerabilties tagged false positif in report get from omp cli ?

2017-03-15 Thread Sebastien Aucouturier
g for log and f for false positif .. hope this can help some of you. Sebastien Aucouturier , VP Engineer and Senior Technologist, ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailma

[Openvas-discuss] how to Get vulnerabilties tagged false positif in report get from omp cli ?

2017-03-15 Thread Sebastien Aucouturier
not report ? which parameters i am missing ? using openvas openvas-cli1.4.3 openvas-libraries 8.0.7 openvas-manager 6.0.7 openvas-scanner 5.0.5 Thanks for help Sebastien Aucouturier , VP En

Re: [Openvas-discuss] [Openvas-announce] New release for OpenVAS-8

2016-09-07 Thread Sebastien Aucouturier
Friends, Take care that openvas-manager 6.0.9 need a minimun openvas-librairie 8.0.8 because of a change in credentials_t structure introduce in 8.0.8 CMakeLists.txt only ask for a openvas-librairie 8.0.5 Seb ___ Openvas-discuss mailing list Openvas-d

Re: [Openvas-discuss] using ssh on port xxxx for Local Security Check ?

2016-07-27 Thread Sebastien Aucouturier
Thanks a lot chris, i miss it. i need hollydays ;-) On Wed, Jul 27, 2016 at 11:35 AM, Chris wrote: > Hi, > > > is it possible to set openvas to use another port than the typical > TCP:22 to make the Local Security Check ? > > when creating a new target as seen here: > > > http://docs.greenbo

[Openvas-discuss] using ssh on port xxxx for Local Security Check ?

2016-07-27 Thread Sebastien Aucouturier
Hi team, is it possible to set openvas to use another port than the typical TCP:22 to make the Local Security Check ? BR Seb ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo

Re: [Openvas-discuss] Having a problem scanning services on nonstandard ports

2016-05-26 Thread Sebastien Aucouturier
d02-83a4-54b079556b69&report_section=hosts&result_hosts_only=0&token=923d481f-dca8-42c8-896d-5783c3e6122f> > > > > > > *From:* Openvas-discuss [mailto: > openvas-discuss-boun...@wald.intevation.org] *On Behalf Of *Sebastien > Aucouturier > *Sent:* Thursday,

Re: [Openvas-discuss] Having a problem scanning services on nonstandard ports

2016-05-25 Thread Sebastien Aucouturier
When you create your target config ? do the port lists attach contains this uncommon ports ? Sebastien Aucouturier , Chief R&D Officer and Senior Technologist, Amazon WS Solutions Provider : http://www.aws-partner-directory.com/PartnerDirectory/PartnerDetail?Name=SecludIT Agence Toul

Re: [Openvas-discuss] Running a script: how to specify a parameter

2016-05-25 Thread Sebastien Aucouturier
That's a very new nice feature for openvas-nasl, it will definitively save time when debugging pluging. is it available in openvas9 official release? or from trunk ? GSM: 06.20.60.77.24 On Wed, May 25, 2016 at 6:50 PM, Michael Meyer wrote: > *** Corti Matteo (ID BD) wrote: > > I would like to

Re: [Openvas-discuss] DOCKER

2016-01-10 Thread Sebastien Aucouturier
I think, you are looking at this : https://github.com/mikesplain/openvas-docker Sebastien Aucouturier , Chief R&D Officer and Senior Technologist, Amazon WS Solutions Provider : http://www.aws-partner-directory.com/PartnerDirectory/PartnerDetail?Name=SecludIT HP Cloud Security Partner : h

[Openvas-discuss] openvas 8 and OSPD 1.0.2

2015-11-18 Thread Sebastien Aucouturier
.2b1 with openvas8 ? Best Regards -- Sebastien Aucouturier , R&D Manager and Senior Technologist, <http://secludit.com/> Amazon WS Solutions Provider : http://www.aws-partner-directory.com/PartnerDirectory/PartnerDetail?Name=SecludIT HP Cloud Security Partner : https://marketplace.hpcloud.c

Re: [Openvas-discuss] SMB Login Problems

2015-11-17 Thread Sebastien Aucouturier
n why you not find it. > > > Even after creating the folder i am not getting any files. The old > directory was /var/lib/openvas/users/om/kb but there no files as well. > I have activated the option to keep the files in the scan config so they > should stay on the machine right?!

Re: [Openvas-discuss] SMB Login Problems

2015-11-17 Thread Sebastien Aucouturier
; René > ___ > Openvas-discuss mailing list > Openvas-discuss@wald.intevation.org > https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss > -- Sebastien Aucouturier , R&D Manager and Senior Technologist, <http://sec

Re: [Openvas-discuss] NVT Feed Update does not complete

2015-02-27 Thread Sebastien Aucouturier
Hi, A friend of mine show me that latest feed contains lots of duplicate plugins (we count 3952). example: /var/lib/openvas/plugins/openvas_tcp_scanner.nasl /var/lib/openvas/plugins/2011/openvas_tcp_scanner.nasl this causes openvassd 6 to crash (coredump) on few duplicate (5 plugins) during pl

Re: [Openvas-discuss] NVT Feed Update does not complete

2015-02-27 Thread Sebastien Aucouturier
Hi, A friend of mine show me that latest feed contains lots of duplicate plugins (we count 3952). example: /var/lib/openvas/plugins/openvas_tcp_scanner.nasl /var/lib/openvas/plugins/2011/openvas_tcp_scanner.nasl this causes openvassd 6 to crash (coredump) on few duplicate (5 plugins) during pl

Re: [Openvas-discuss] Heartbleed plugin

2014-04-10 Thread Sebastien Aucouturier
redone the test and now the OpenVAS results are the same as the ones from Nessus. (Seems there was a problem with that new NVT) on latest nvt, i have added a timeout to each recv call : recv( socket:soc, length:5, timeout:5 ); and it works better for me. I got same result as got with h

Re: [Openvas-discuss] [Openvas-devel] OpenVAS DevCon #4: Travel Assistance

2013-07-04 Thread Sebastien Aucouturier
That's great, i hope to be one of yours next years. I want also to thanks you all, the openvas6 is great !! and i am happy to use it. Best Le 03/07/2013 15:01, Jan-Oliver Wagner a écrit : Hello, the OpenVAS DevCon-4 took place as planned and was very productive and efficient. We had quite so

Re: [Openvas-discuss] Consolidate terms threat/serverity/cvss

2013-05-14 Thread Sebastien Aucouturier
In my use of report make by openvas scanner, i already make the choice to only use cvss, and rename it as score ;-) and color (critical/high/medium/low/None) of score according the value. My 2 cents Le 14/05/2013 11:27, Jan-Oliver Wagner a écrit : Hello OpenVAS Users, I like to collect you

[Openvas-discuss] Update manager when scan and manager running, effects ?

2013-03-18 Thread Sebastien Aucouturier
Hi Team, i always shutdown manager to do a manager --update after getting new nvt, and restarting scanner but what can be the effect of running an openvas-manager update ? while manager running, and scan in progress ? as on my poor system the update take around 30 minutes to complete. -- "

Re: [Openvas-discuss] openvasmd --rebuild not working

2013-03-06 Thread Sebastien Aucouturier
see that it is empty. Regards, Paula 2013/3/6 Sebastien Aucouturier Paula, try : locate openvas/mgr checking logs,  yours should be /usr/local/lib/var/lib/locate openvas/mgr do a : touch /usr/local/lib/var/lib/locate openvas/mgr/task.db and retry: openvasmd --rebuild  (take care that op

Re: [Openvas-discuss] openvasmd --rebuild not working

2013-03-06 Thread Sebastien Aucouturier
Paula, try : locate openvas/mgr checking logs, yours should be /usr/local/lib/var/lib/locate openvas/mgr do a : touch /usr/local/lib/var/lib/locate openvas/mgr/task.db and retry: openvasmd --rebuild (take care that openvassd must be running) Le 06/03/2013 09:24, Paula Gonzalez Muñoz a é

Re: [Openvas-discuss] any working distribution for openvas?

2013-03-03 Thread Sebastien Aucouturier
but if you want not make people laugh avoid to say "for professional distributions like gentoo" Am 03.03.2013 11:27, schrieb Sebastien Aucouturier: argh i was not happy to see the message telling not to use openvas on gentoo, but i do not more agree with this message complying

Re: [Openvas-discuss] any working distribution for openvas?

2013-03-03 Thread Sebastien Aucouturier
argh i was not happy to see the message telling not to use openvas on gentoo, but i do not more agree with this message complying about gentoo... hey guys ... use the linux os you want, but do not blame ones that others use and that is not the same of yours. And at the end what i want

Re: [Openvas-discuss] any working distribution for openvas?

2013-03-03 Thread Sebastien Aucouturier
Le 03/03/2013 09:54, Ningun Nick a écrit : It seems openvas was designed for easy distros like these based on debian (Ubuntu) or Redhat (Centos, fedora), dont try using it in professional distributions like gentoo or slackware, i use openvas 4, 5 and now 6 on a gentoo without having any trouble

Re: [Openvas-discuss] Cron script?

2013-02-08 Thread Sebastien Aucouturier
Until the initscript is revamped*, I will restart the scanner as it seems to work more reliably. Thanks again, Simon *: If time permits, I'd like to convert it to use the LSB init functions On 13-02-08 03:56 AM, Sebastien Aucouturier wrote: i have not test it yet , but using your way, i wo

Re: [Openvas-discuss] Cron script?

2013-02-08 Thread Sebastien Aucouturier
ml [2]: http://www.openvas.org/compendium/automatically-updating-an-nvt-feed.html On 13-02-07 04:52 PM, Sebastien Aucouturier wrote: Simon, the script you provide, only update nvt directory, it does not update the database like 'openvasmd --update' do, and for that, you must, at first, re

Re: [Openvas-discuss] Cron script?

2013-02-07 Thread Sebastien Aucouturier
Simon, the script you provide, only update nvt directory, it does not update the database like 'openvasmd --update' do, and for that, you must, at first, restart openvassd to load the new nvt. Le 07/02/2013 18:47, Simon Deziel a écrit : Hi, The utterly simple script attached should be dump

[Openvas-discuss] why port_list ' All TCP and Nmap 5.51 top 100 UDP ' does not contains all TCP from 1 to 65535 ?

2012-10-21 Thread Sebastien Aucouturier
Hi team, i came in a situation that cause me a headache to undestand why my scan does not give answers i was expecting, I got a server that run ssh server (protocol 1.5 and 1.33 only), on port 22,,2223,2224,2225 . The scan report me that : - a ssh server was running on port 22,,2

Re: [Openvas-discuss] Problems with anonymous SVN checkout of OpenVAS

2012-10-01 Thread Sebastien Aucouturier
Thanks a lot for the news. Le 01/10/2012 12:12, Jan-Oliver Wagner a écrit : Hello, some of you may have experienced problems with anonymous SVN checkout of OpenVAS. Checkouts often only retrieve a partial update and then communication is stopped. The reason is that the server simply reaches th

Re: [Openvas-discuss] Config is in use

2012-09-26 Thread Sebastien Aucouturier
ok then, now let say that you already have 5 configs in the configs_trash now let say that you already have 5 configs in the configs you create a new config, it takes id 6 in the configs table you create the task and associate this new config ... you delete the task you delete the config ... it t

Re: [Openvas-discuss] Config is in use

2012-09-26 Thread Sebastien Aucouturier
sorry to says that i just try and got again the 'config in use', the modify-config is done before the create-task this night, i will write each command i do, and show you the progress in task.db. but at the end i think the question is, when you delete a config, which id (not uuid) is put in th

Re: [Openvas-discuss] Config is in use

2012-09-25 Thread Sebastien Aucouturier
Dear Allon, i have add this trouble last week, with this process : creating config modify config creating target creating task start task getting report deleting task deleting config and again : creating config modify config and ... bad .. getting issue : Config is in use after investigation

Re: [Openvas-discuss] scan configuration

2012-07-11 Thread Sebastien Aucouturier
Hi, for us to help, can you tell about the scan config you use ? do you provide Credentials to openvas (lsc) ? Can you please tell us which CVSS score differ and for which vulnerability and plugin ? BR Seb Le 12/07/2012 01:16, capture Win a écrit : Hello, I installed OpenVAS on VirtualBox D

Re: [Openvas-discuss] Installing OpenVAS on Debian Sid

2012-07-11 Thread Sebastien Aucouturier
Please, Check the libgnutls you have ? you may see in other posts on forum that openvas encountered trouble with libgnutls 2.12.x , better to use 2.10.x I hope this help and that this is the main problem. BR Le 12/07/2012 07:31, Juergen Fiedler a écrit : Hello, I have installed OpenVAS follo

Re: [Openvas-discuss] Authentication configuration could not be loaded

2012-06-29 Thread Sebastien Aucouturier
Hi Marek, nice to see another gentoo friend there, Which libgnutls are you using ? i successfully used 2.8.6 and 2.10.4 but gnutls 2.12.18 and 2.12.20 were a nightmare, openvas5 was not working at all with omp. BR Le 29/06/2012 13:19, Marek Wichtowski a écrit : Hi, I have successfully insta

Re: [Openvas-discuss] Reports not giving proper information

2012-06-25 Thread Sebastien Aucouturier
ks for the reply but I missed those mails in my mailbox, doesn't know how ... Just checked the thread and got it ... Don't get so irritated some time is happens people tend to miss mails due to some technical reasons. Sorry to bother you. On 06/25/2012 12:33 PM, Sebastien Aucouturier wrote

Re: [Openvas-discuss] Reports not giving proper information

2012-06-25 Thread Sebastien Aucouturier
hey, don't shout so early in the morning, first open you eyes or check your mail box, there were 2 good answers to your question. Le 25/06/2012 07:31, Sachin Murudkar a écrit : NO ANSWER On 06/23/2012 01:19 PM, Sachin Murudkar wrote: Hi Team I have install openvas successfully on a

Re: [Openvas-discuss] Installing on Ubuntu 12.04 - openvas.org instructions flawed?

2012-06-18 Thread Sebastien Aucouturier
Never got problem compiling openvas from sources and making it run on my gentoo. Just take care with gnutls library, i encountered trouble with 2.12.x version (and none with 2.8.x and 2.10.x). BR Seb Le 18/06/2012 14:35, Whit Blauvelt a écrit : On Mon, Jun 18, 2012 at 10:33:54AM +0100, Matthe

Re: [Openvas-discuss] OMP create-config with get_configs_response methods

2012-06-13 Thread Sebastien Aucouturier
OK MY BAD, was using omp-2.0 howto ... when omp3.0 give the solution ;-) adding export attribute to the get_config commands ;-) step by step, i progress, sorry for the disturb guys. Le 13/06/2012 17:17, Sebastien Aucouturier a écrit : So far, here is my progress, i downgrade my gnutls to

Re: [Openvas-discuss] OMP create-config with get_configs_response methods

2012-06-13 Thread Sebastien Aucouturier
So far, here is my progress, i downgrade my gnutls to 2.8.6 , but 2.10.4 seems working too. gnutls 2.12.18 and 2.12.20 were a nightmare, openvas5 was not working at all with omp, i will track this gnutls problems later so now, my progress and you help will be appreciate please i export a confi

Re: [Openvas-discuss] OMP create-config with get_configs_response methods

2012-06-12 Thread Sebastien Aucouturier
Le 11/06/2012 22:46, Matthew Mundell a écrit : how use inline 'OMP' create-config with get_configs_response methods when the xml is more than 64K ? i am bounce by the shell 64k limits :-( Pipe the XML to the omp command? cat create_config.xml | omp -X - Hi, I was very confident this

Re: [Openvas-discuss] OMP create-config with get_configs_response methods

2012-06-11 Thread Sebastien Aucouturier
oupps, you'are right, what more easy. it s time for me to stop working this day Thanks a lot matthew Le 11/06/2012 22:46, Matthew Mundell a écrit : how use inline 'OMP' create-config with get_configs_response methods when the xml is more than 64K ? i am bounce by the shell 64k limits :-( Pipe

Re: [Openvas-discuss] OMP create-config with get_configs_response methods

2012-06-11 Thread Sebastien Aucouturier
oupps, you'are right, what more easy. it s time for me to stop working this day ;-) Thanks a lot matthew Pipe the XML to the omp command? cat create_config.xml | omp -X - -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Dir

[Openvas-discuss] OMP create-config with get_configs_response methods

2012-06-11 Thread Sebastien Aucouturier
Hi team, how use inline 'OMP' create-config with get_configs_response methods when the xml is more than 64K ? i am bounce by the shell 64k limits :-( -- | Sébastien AUCOUTURIER | Software Design Engineer Lead | ITrust | 55 rue l'Occitane BP 67303 31673 LABEGE CEDEX | Email: s.aucou

Re: [Openvas-discuss] Task failed to start but omp still show it as requested to start.

2012-06-05 Thread Sebastien Aucouturier
Hi jan, I did not experience such behaviour for a long time myself. Which version of OpenVAS are you using? Do you have a reliable way to reproduce this? However, if you restart openvasmd, it does a self-check and such tasks are set to "Stopped". Best Jan i used latest openvasmd 3.0.1 for

[Openvas-discuss] Task failed to start but omp still show it as requested to start.

2012-06-01 Thread Sebastien Aucouturier
Hi Team, openvasmd.log show this : event task:MESSAGE:2012-05-30 15h38.26 UTC:29569: Status of task ikare_10.1.0.254 (a86a3752-ee59-4eaa-afc1-0b63394efa9b) has changed to Requested event task:MESSAGE:2012-05-30 15h38.26 UTC:29569: Task a86a3752-ee59-4eaa-afc1-0b63394efa9b has been requested

Re: [Openvas-discuss] Comparison

2011-10-11 Thread Sebastien Aucouturier
Chandra, i am doing this kind of test comparing nessus/ovas , and i may publish the results soon to the list. BR Seb Le Mardi 11 Octobre 2011 09:51 CEST, "Chandrashekhar B" a écrit: > Interesting! > > What will be valuable to have: what checks OpenVAS missed which Nessus > identified?