After sync, incomplete NVT list

Hi,

Running into a strange feed sync issue.
So with everything running I execute the nvt sync command.
su -c “greenbone-nvt-sync” gvm
Which runs, no errors, but when looking in GSA I only have 188 NVT’s which are mostly of severity log.
Looking at the plugins directory there appear to be a complete list.

Any idea where to look?

Did you run it interactively ? What is the output ? IDS/IPS/Firewalls did interrupts sometimes a Sync due to some false interpretation of some Signatures some NVTs might match.

1 Like

Hello Lukas,

I have run two commands:

root@soc-vulnscanning:/# su -c "rsync --compress-level=9 --links --times --omit-dir-times --recursive --partial rsync://feed.community.greenbone.net:/nvt-feed /usr/local/var/lib/openvas/plugins" gvm
Greenbone community feed server - http://feed.community.greenbone.net/
This service is hosted by Greenbone Networks - http://www.greenbone.net/

All transactions are logged.

If you have any questions, please use the Greenbone community portal. 
See https://community.greenbone.net for details.

By using this service you agree to our terms and conditions.

Only one sync per time, otherwise the source ip will be temporarily blocked.

And

su -c "greenbone-nvt-sync" gvm
<28>Mar  5 08:09:30 greenbone-nvt-sync: The log facility is not working as expected. All messages will be written to the standard error stream.
<29>Mar  5 08:09:30 greenbone-nvt-sync: No Greenbone Security Feed access key found, falling back to Greenbone Community Feed
<29>Mar  5 08:09:30 greenbone-nvt-sync: Configured NVT rsync feed: rsync://feed.community.greenbone.net:/nvt-feed
Greenbone community feed server - http://feed.community.greenbone.net/
This service is hosted by Greenbone Networks - http://www.greenbone.net/

All transactions are logged.

If you have any questions, please use the Greenbone community portal. 
See https://community.greenbone.net for details.

By using this service you agree to our terms and conditions.

Only one sync per time, otherwise the source ip will be temporarily blocked.

receiving incremental file list

sent 1,171 bytes  received 2,677,150 bytes  67,805.59 bytes/sec
total size is 296,441,844  speedup is 110.68
Greenbone community feed server - http://feed.community.greenbone.net/
This service is hosted by Greenbone Networks - http://www.greenbone.net/

All transactions are logged.

If you have any questions, please use the Greenbone community portal. 
See https://community.greenbone.net for details.

By using this service you agree to our terms and conditions.

Only one sync per time, otherwise the source ip will be temporarily blocked.

receiving incremental file list

sent 38 bytes  received 65 bytes  206.00 bytes/sec
total size is 1,014  speedup is 9.84

That looks good so i don´t think this is a feed or sync issue. I would look into your VT cache and the redis setup.

2 Likes