[Openvas-discuss] NVT Feed Update does not complete

Michael Wiegand michael.wiegand at greenbone.net
Fri Feb 27 11:00:26 CET 2015


Hello,

Recent changes to the feed directory structure and the feed update
process regrettably resulted in a number of duplicate NVTs in the
OpenVAS NVT feed.

The duplicate NVTs have been removed from the OpenVAS NVT feed as of
feed version 201502270907.

Subsequent call of openvas-nvt-sync will automatically remove the
duplicate NVTs from your plugins directory if you are using rsync.

Sorry for the inconvenience caused by the latest changes.

Regards,


Michael

* Sebastien Aucouturier [27. Feb 2015]:
> Hi,
> A friend of mine show me that latest feed contains lots of duplicate
> plugins  (we count 3952).
> 
> example:
>  /var/lib/openvas/plugins/openvas_tcp_scanner.nasl
>  /var/lib/openvas/plugins/2011/openvas_tcp_scanner.nasl
> 
> this causes openvassd 6 to crash (coredump) on few duplicate (5 plugins)
> during plugins loading.
> 
> Perhaps Older version than latest  Openvas 7/8 may shared same behaviour.
> 
> To fix, We run a script to delete duplicates after nvt-sync.
> 
> BR
> Seb
> 
> 2015-02-26 20:35 GMT+01:00 Win Pham <win at mindspring.com>:
> 
> >
> > We just finished a clean build and you're right that it does fix the
> > issue.  From that, it is clear the issue was address in the openvas code
> > already.
> >
> > I think the issue will only affect folks who have older versions of
> > Openvas as we did on a few boxes.  One of the boxes was running the 7
> > beta.  It's interesting that the .nasl while loading could cause the SEGV
> > signal to be received (as logged) and discontinue loading the rest.  Below
> > is the gdb from the beta7.  I just didn't loading a .nasl would ever cause
> > an issue.
> >
> > (gdb) bt
> >
> > #0  0x00007f68a5405060 in recvmsg () at
> > ../sysdeps/unix/syscall-template.S:83
> >
> > #1  0x00000000004076b1 in loading_handler_start ()
> >
> >     at /opt/download/openvas-scanner-4.0+beta7/src/openvassd.c:749
> >
> > #2  main (argc=1, argv=0x7fffe2205cd8)
> >
> >     at /opt/download/openvas-scanner-4.0+beta7/src/openvassd.c:950
> >
> >
> >
> >
> >
> >
> > On 2/26/2015 1:17 PM, Hani Benhabiles wrote:
> >
> > On 2015-02-26 17:52, Win Pham wrote:
> >
> > See if this helps:
> >
> > [Thu Feb 26 17:45:39 2015][1490] Loading
> > 2011/gb_google_chrome_mult_vuln_jun11_win.nasl
> >
> > [Thu Feb 26 17:45:39 2015][1490] Loading
> > 2011/gb_wireshark_asn1ber_dissector_dos_vuln_win.nasl
> >
> > [Thu Feb 26 17:45:39 2015][1490] Loading 2011/gb_ubuntu_USN_1207_1.nasl
> >
> > [Thu Feb 26 17:45:39 2015][1490] Loading 2011/openvas_tcp_scanner.nasl
> >
> > [Thu Feb 26 17:45:39 2015][1490] received the SEGV signal
> >
> > [Thu Feb 26 17:45:39 2015][1490] closing logfile
> >     *
> >     *
> >     *
> >
> >
> >
> > Hi,
> >
> > I tried a clean rebuild with both OpenVAS 7 and 8, using the latest nvt
> > feed, and got no problems.
> >
> > Can you get me a backtrace of the hanging process, using gdb ?
> >
> > $ gdb -q
> > (gdb) attach PID_OF_OPENVASSD
> > <some output>
> > (gdb) bt
> > <post back this output>
> >
> >
> >
> >
> >
> >
> > On 2/26/2015 12:24 PM, Michael Meyer wrote:
> >
> > *** Helmut Koers wrote:
> >
> > md otp:MESSAGE:2015-02-26 16h32.24 CET:3476: Scanner loading: 38150 /
> > 41904 nvts.
> > md otp:MESSAGE:2015-02-26 16h35.14 CET:3487: Scanner loading: 38150 /
> > 41904 nvts.
> > md otp:MESSAGE:2015-02-26 16h35.14 CET:3488: Scanner loading: 38150 /
> > 41904 nvts.
> > md otp:MESSAGE:2015-02-26 16h35.24 CET:3491: Scanner loading: 38150 /
> > 41904 nvts.
> >
> >
> > Stop scanner and add "log_plugins_name_at_load = yes" to
> > /etc/openvas/openvassd.conf.
> >
> > Start scanner and look in /var/log/openvas/openvassd.messages on
> > which NVT it hangs. Please try a few times to see if it is always the
> > same NVT.
> >
> > Micha
> >
> >
> >
> > _______________________________________________
> > Openvas-discuss mailing list
> > Openvas-discuss at wald.intevation.org
> >
> > https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
> >
> > _______________________________________________
> > Openvas-discuss mailing list
> > Openvas-discuss at wald.intevation.org
> > https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
> >
> >
> >
> > _______________________________________________
> > Openvas-discuss mailing list
> > Openvas-discuss at wald.intevation.org
> > https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
> >
> 
> 
> 
> -- 
> 
> --
>  Sébastien AUCOUTURIER | Research and Development Manager
>  Phone. +33(0)5.67.34.67.84| www.itrust.fr
>  IT Security Experts (Services & Solutions) | Keep Information Security Simple
> 
>  This e-mail is confidential (and any attachments) is intended to its
> recipient(s).

> _______________________________________________
> Openvas-discuss mailing list
> Openvas-discuss at wald.intevation.org
> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss


-- 
Michael Wiegand |  Greenbone Networks GmbH  |  http://www.greenbone.net/
Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460
Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 181 bytes
Desc: not available
URL: <http://lists.wald.intevation.org/pipermail/openvas-discuss/attachments/20150227/086b34aa/attachment.sig>


More information about the Openvas-discuss mailing list