[Openvas-discuss] Report filtering / multiple vuln instance reporting???

Matthew Coene mcoene at Bacardi.com
Fri Sep 16 16:31:26 CEST 2011


Hello everyone,

I run weekly scans on my servers, and noticed quite a large jump in
reported vulns between last week and today..      Going over the #'s and
tracing each I noticed the following on one server for this example...

(OID: 1.3.6.1.4.1.25623.1.0.801330) - reported 2x
(OID: 1.3.6.1.4.1.25623.1.0.900366) - reported 2x
(OID: 1.3.6.1.4.1.25623.1.0.900336) - reported 2x
(OID: 1.3.6.1.4.1.25623.1.0.900366) - reported 2x
(OID: 1.3.6.1.4.1.25623.1.0.800482) - reported 2x
(OID: 1.3.6.1.4.1.25623.1.0.902290)  - reported 2x
(OID: 1.3.6.1.4.1.25623.1.0.902256)  - reported 2x
(OID: 1.3.6.1.4.1.25623.1.0.801598) - reported 2x
(OID: 1.3.6.1.4.1.25623.1.0.902285) - reported 2x
(OID: 1.3.6.1.4.1.25623.1.0.900097) - reported 2x
(OID: 1.3.6.1.4.1.25623.1.0.800461) - reported 2x
(OID: 1.3.6.1.4.1.25623.1.0.800429) - reported 2x
(OID: 1.3.6.1.4.1.25623.1.0.801456) - reported 2x

Not sure why this sprung up... Nothing has changed with the scan setup,
filtering, overrides, etc, between then and now...

So maybe just a fluke...   Going to run a manual re-scan using the same
template to see, though I thought it might be worth mentioning...

Cheers,

Matt.




More information about the Openvas-discuss mailing list