How can I increase the log level of openvassd

asmaack · November 17, 2018, 4:27pm

I’m trying to debug openvassd v. 5.1.3 where it seems to just drop dead under some circumstances.

I cannot figure out how to increase the log level of openvassd and get more debug data into my log file. There is nothing about this in the man page or in openvassd --help?

Anyone?

I take it that it’s not possible.
Is that true?

Jan · November 21, 2018, 12:07pm

Unfortunately, openvassd as of GVM-9 (openvassd 5.1.x) does not allow for a modern flexible log configuration.

We have proper log configuration, log levels and log domains in place for all other modules of GVM-9. Those are the modules developed by Greenbone from scratch.

However, for GVM-10 we have implemented this standard into openvassd as well:

github.com

greenbone/openvas-scanner/blob/master/src/openvassd_log_conf.cmake_in

# OpenVAS Scanner logging configuration
#
# WARNING: Setting the level of any group (besides event*) to include debug
#          may reveal passwords in the logs.

[sd   main]
prepend=%t %s %p
separator=:
prepend_time_format=%Y-%m-%d %Hh%M.%S %Z
file=${GVM_LOG_DIR}/openvassd.log
level=127

[*]
prepend=%t %s %p
separator=:
prepend_time_format=%Y-%m-%d %Hh%M.%S %Z
file=${GVM_LOG_DIR}/openvassd.log
level=127

asmaack · November 21, 2018, 2:02pm

Thanks, when can we expect gvm-10 release?

I’m trying to debug this problem where openvassd will drop dead. It seems to happen as a result of “openvasmd --rebuild”, but only occationally, openvassd log is numb and openvasmd.log will only complain with:

md main:WARNING:2018-10-22 22h13.25 utc:24248: openvas_scanner_connect_unix: Failed to connect to scanner (/usr/local/var/run/openvassd.sock): Connection refused

More complete peace of openvasmd.log:

md manage: INFO:2018-10-22 22h13.24 utc:24245: Checking alerts.
md main:MESSAGE:2018-10-22 22h13.25 utc:24247: OpenVAS Manager version 7.0.4 (GIT revision a3356c98-openvas-manager-7.0) (DB revision 184)
md main: INFO:2018-10-22 22h13.25 utc:24247: rebuild_nvt_cache_retry: Reloading NVT cache
md main: INFO:2018-10-22 22h13.25 utc:24248: update_or_rebuild_nvt_cache: Rebuilding NVT cache
base gpgme:MESSAGE:2018-10-22 22h13.25 utc:24248: Setting GnuPG dir to ‘/usr/local/var/lib/openvas/openvasmd/gnupg’
base gpgme:MESSAGE:2018-10-22 22h13.25 utc:24248: Using OpenPGP engine version ‘2.2.4’
md main: INFO:2018-10-22 22h13.25 utc:24248: Updating NVT cache.
md main:WARNING:2018-10-22 22h13.25 utc:24248: openvas_scanner_connect_unix: Failed to connect to scanner (/usr/local/var/run/openvassd.sock): Connection refused

cfi · November 21, 2018, 2:28pm

@asmaack As it seems the initial question (how to increase log level) was answered and the debugging question with the current available methods is a separate topic i would suggest to open a new thread.

This helps to avoid mixing several different topics within the same thread.

For completeness i’m linking the related logging documentation for each main module below (scanner available in 6.0 beta1+)

github.com

greenbone/gvmd/blob/v7.0.3/INSTALL#L169-L202


Logging Configuration
---------------------


By default Manager writes logs to the file


<install-prefix>/var/log/openvas/openvasmd.log


Logging is configured entirely by the file


<install-prefix>/etc/openvas/openvasmd_log.conf


The configuration is divided into domains like this one


[md   main]
prepend=%t %p
prepend_time_format=%Y-%m-%d %Hh%M.%S %Z
file=/var/log/openvas/openvasmd.log
level=128


The "level" field controls the amount of logging that is written.

This file has been truncated. show original

github.com

greenbone/gsa/blob/v7.0.3/INSTALL#L88-L121


Logging Configuration
---------------------


By default GSA writes logs to the file


<install-prefix>/var/log/openvas/gsad.log


Logging is configured entirely by the file


<install-prefix>/etc/openvas/gsad_log.conf


The configuration is divided into domains like this one


	[gsad main]
	prepend=%t %p
	prepend_time_format=%Y-%m-%d %Hh%M.%S %Z
	file=/var/log/openvas/gsad.log
	level=128


The "level" field controls the amount of logging that is written.

This file has been truncated. show original

github.com

greenbone/openvas-scanner/blob/v6.0+beta1/INSTALL#L173-L222


Logging Configuration
---------------------


If you encounter problems, by default the scanner writes logs to the file


  <install-prefix>/var/log/gvm/openvassd.log


It may contain useful information.The exact location of this file may differ
depending on your distribution and installation method. Please have this file
ready when contacting the GVM developers through the OpenVAS mailing list
or the online chat or submitting bug reports at
https://github.com/greenbone/openvas-scanner/issues
as they may help to pinpoint the source of your issue.


Logging is configured entirely by the file


  <install-prefix>/etc/openvas/openvassd_log.conf


The configuration is divided into domains like this one

This file has been truncated. show original