OpenVAS常見問題

常見問題

一、執行yum後會出現”Could not retrieve mirrorlist”

http://blog.faq-book.com/?p=3092

二、掃描時停在1%

http://s3.jles.tn.edu.tw/~pblog/blog/archives/1305

https://www.alienvault.com/forums/discussion/768/openvas-hangs-at-1-how-to-fix

It's a bug on the current version. Openvas certs has expired. There is a workaround to fix it. Please, follow this instructions: 

1º Regenerate openvas server certificate:

# openvas-mkcert -f

Accept all with "intro" key

2º Regenerate openvas client certificate (in all sensors):

# openvas-mkcert-client -n om -i

3º Restart all open-face services in the server and all sensors:

# /etc/init.d/openvas-manager restart

# /etc/init.d/openvas-scanner restart

Wait some minutes and execute the scan again.  

異常的Reloaded all the NVTs表示目前有異常

正常的圖如下

 

解決方法

redis-cli -s /tmp/redis.sock

進入以下畫面

redis /tmp/redis.sock>

輸入FLUSHALL

redis /tmp/redis.sock> FLUSHALL

OK

再去確認openvas-scanner.service的狀態應該就是incoming connections了

三、無法開啟PDF檔案，安裝以下套件可解決

Openvas not generating pdf reports

# yum -y install texlive-changepage texlive-titlesec

# mkdir -p /usr/share/texlive/texmf-local/tex/latex/comment

# cd /usr/share/texlive/texmf-local/tex/latex/comment

# wget http://mirrors.ctan.org/macros/latex/contrib/comment/comment.sty

# chmod 644 comment.sty

# texhash

四、Linux當掉有重開的話，重啟openvas指令

#openvasmd

#openvassd

#systemctl start openvas-manager.service

#systemctl start openvas-scanner.service

就可以啟動openvas服務

五、OpenVAS 503 – Service temporarily down處理方式

openvas-mkcert-client -n om -i

openvas-nvt-sync --wget

/etc/init.d/openvas-scanner stop; /etc/init.d/openvas-manager stop;

openvassd

rm /var/lib/openvas/mgr/tasks.db

openvasmd --progress --rebuild -v
此種處理方式會刪掉資料庫，造成無法登入web管理介面，需再重新輸入openvas-setup，重新建立新的設定檔
https://hungred.com/how-to/openvas-503-service-temporarily-down/