Failing Scanner and CVE's not showing up in Dashboard

#1

Can anyone help me with this? I have reinstalled this like 20 times and cannot get a scan to work.

md manage:WARNING:2019-11-25 16h03.47 UTC:1257: Could not connect to Scanner at /tmp/ospd.sock
md manage:WARNING:2019-11-25 16h03.47 UTC:1257: OSP start_scan 35479412-0c95-4ab4-8622-a31af9877b36: Could not connect to Scanner
event task:MESSAGE:2019-11-25 16h03.47 UTC:1257: Status of task SCAN 25NOV2019 (2b54c9e7-9c32-43da-b732-88fd4d393606) has changed to Done
md manage:WARNING:2019-11-25 16h03.58 utc:1364: manage_update_nvt_cache_osp: failed to connect to /opt/gvm/var/run/ospd.sock

#2

You need to find out why your ospd-openvas is not listening to /tmp/ospd.sock:

Either ospd-openvas is listening on another file socket or the ospd-openvas is not running at all.

1 Like
#3

Yes I have been looking where to find that config in GVM? Any ideas?

#4

About running ospd-openvas the tool provides some configuration help via

$ ospd-openvas --help
1 Like
#5

I have th same problem(git clone && cmake in debian10):
==> /usr/local/var/log/gvm/gvmd.log <==
md manage:WARNING:2019-12-05 02h07.29 utc:23345: manage_update_nvt_cache_osp: failed to connect to /tmp/ospd.sock
md manage:WARNING:2019-12-05 02h07.48 utc:23626: manage_update_nvt_cache_osp: failed to connect to /tmp/ospd.sock
md manage:WARNING:2019-12-05 02h08.04 utc:23648: manage_update_nvt_cache_osp: failed to connect to /tmp/ospd.sock
md manage:WARNING:2019-12-05 02h08.14 utc:23656: manage_update_nvt_cache_osp: failed to connect to /tmp/ospd.sock
md manage:WARNING:2019-12-05 02h08.24 utc:23661: manage_update_nvt_cache_osp: failed to connect to /tmp/ospd.sock
md manage:WARNING:2019-12-05 02h08.34 utc:23667: manage_update_nvt_cache_osp: failed to connect to /tmp/ospd.sock
md manage:WARNING:2019-12-05 02h08.44 utc:23673: manage_update_nvt_cache_osp: failed to connect to /tmp/ospd.sock

# ospd-openvas --help
usage: ospd-openvas [-h] [--version] [-s [CONFIG]] [-p PORT] [-b ADDRESS]
                    [-u UNIX_SOCKET] [--pid-file PID_FILE] [-m SOCKET_MODE]
                    [-k KEY_FILE] [-c CERT_FILE] [--ca-file CA_FILE]
                    [-L LOG_LEVEL] [-f] [-t STREAM_TIMEOUT] [-l LOG_FILE]
                    [--niceness NICENESS]
                    [--scaninfo-store-time SCANINFO_STORE_TIME]

OSPD - openvas

optional arguments:
  -h, --help            show this help message and exit
  --version             Print version then exit.
  -s [CONFIG], --config [CONFIG]
                        Configuration file path (default: ~/.config/ospd.conf)
  -p PORT, --port PORT  TCP Port to listen on. Default: 0
  -b ADDRESS, --bind-address ADDRESS
                        Address to listen on. Default: 0.0.0.0
  -u UNIX_SOCKET, --unix-socket UNIX_SOCKET
                        Unix file socket to listen on. Default:
                        /var/run/ospd/ospd.sock
  --pid-file PID_FILE   Location of the file for the process ID. Default:
                        /var/run/ospd.pid
  -m SOCKET_MODE, --socket-mode SOCKET_MODE
                        Unix file socket mode. Default: 0o700
  -k KEY_FILE, --key-file KEY_FILE
                        Server key file. Default:
                        /usr/var/lib/gvm/private/CA/serverkey.pem
  -c CERT_FILE, --cert-file CERT_FILE
                        Server cert file. Default:
                        /usr/var/lib/gvm/CA/servercert.pem
  --ca-file CA_FILE     CA cert file. Default: /usr/var/lib/gvm/CA/cacert.pem
  -L LOG_LEVEL, --log-level LOG_LEVEL
                        Wished level of logging. Default: WARNING
  -f, --foreground      Run in foreground and logs all messages to console.
  -t STREAM_TIMEOUT, --stream-timeout STREAM_TIMEOUT
                        Stream timeout. Default: 10
  -l LOG_FILE, --log-file LOG_FILE
                        Path to the logging file.
  --niceness NICENESS   Start the scan with the given niceness. Default 10
  --scaninfo-store-time SCANINFO_STORE_TIME
                        Time in hours a scan is stored before being considered
                        forgotten and being delete from the scan table.
                        Default 0, disabled.

Now the NVTs in Page SecInfo is empty (CVEs and CPEs have data)

#6

Your socket location my be wrong, use netstat to check for your listening socket.

#7

Please read the output of the command carefully

  -u UNIX_SOCKET, --unix-socket UNIX_SOCKET
                        Unix file socket to listen on. Default:
                        /var/run/ospd/ospd.sock

and afterwards look again at your log messages.

3 Likes