OpenVAS continuos error " Internal error: get_many:2338 (GSA 7.0.2) "

Archive Greenbone Community Edition
1

Hi to all,

I have installed open openVAS on Centos 7
Version from atomic repository
Greenbone Security Assistant Version 7.0.2
OpenVAS Scanner 5.0.1
Openvas 8.

[root@OpenVAS ~]# rpm -qa | grep openvas
openvas-smb-1.0.2-1980.el7.art.x86_64
openvas-9.0.0-2796.el7.art.noarch
openvas-manager-7.0.2-2737.el7.art.x86_64
openvas-cli-1.4.5-2739.el7.art.x86_64
openvas-scanner-5.1.1-2736.el7.art.x86_64
openvas-libraries-9.0.1-2735.el7.art.x86_64
[root@OpenVAS ~]#

[root@OpenVAS ~]# openvas-check-setup --v9
openvas-check-setup 2.3.7
Test completeness and readiness of OpenVAS-9

Please report us any non-detected problems and
help us to improve this check routine:
http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss

Send us the log-file (/tmp/openvas-check-setup.log) to help analyze the problem.

Use the parameter --server to skip checks for client tools
like GSD and OpenVAS-CLI.

Step 1: Checking OpenVAS Scanner …
OK: OpenVAS Scanner is present in version 5.1.1.
OK: redis-server is present in version v=3.0.7.
OK: scanner (kb_location setting) is configured properly using the redis-server socket: /tmp/redis.sock
OK: redis-server is running and listening on socket: /tmp/redis.sock.
OK: redis-server configuration is OK and redis-server is running.
OK: NVT collection in /var/lib/openvas/plugins contains 47222 NVTs.
WARNING: Signature checking of NVTs is not enabled in OpenVAS Scanner.
SUGGEST: Enable signature checking (see http://www.openvas.org/trusted-nvts.html).
OK: The NVT cache in /var/cache/openvas contains 47236 files for 47222 NVTs.
Step 2: Checking OpenVAS Manager …
OK: OpenVAS Manager is present in version 7.0.2.
OK: OpenVAS Manager database found in /var/lib/openvas/mgr/tasks.db.
OK: Access rights for the OpenVAS Manager database are correct.
OK: sqlite3 found, extended checks of the OpenVAS Manager installation enabled.
OK: OpenVAS Manager database is at revision 184.
OK: OpenVAS Manager expects database at revision 184.
OK: Database schema is up to date.
OK: OpenVAS Manager database contains information about 47222 NVTs.
OK: At least one user exists.
OK: OpenVAS SCAP database found in /var/lib/openvas/scap-data/scap.db.
OK: OpenVAS CERT database found in /var/lib/openvas/cert-data/cert.db.
OK: xsltproc found.
Step 3: Checking user configuration …
WARNING: Your password policy is empty.
SUGGEST: Edit the /etc/openvas/pwpolicy.conf file to set a password policy.
Step 4: Checking Greenbone Security Assistant (GSA) …
OK: Greenbone Security Assistant is present in version 7.0.2.
OK: Your OpenVAS certificate infrastructure passed validation.
Step 5: Checking OpenVAS CLI …
OK: OpenVAS CLI version 1.4.5.
Step 6: Checking Greenbone Security Desktop (GSD) …
SKIP: Skipping check for Greenbone Security Desktop.
Step 7: Checking if OpenVAS services are up and running …
OK: netstat found, extended checks of the OpenVAS services enabled.
OK: OpenVAS Scanner is running and listening on a Unix domain socket.
OK: OpenVAS Manager is running and listening on a Unix domain socket.
OK: Greenbone Security Assistant is listening on port 80, which is the default port.
Step 8: Checking nmap installation …
WARNING: Your version of nmap is not fully supported: 6.47
SUGGEST: You should install nmap 5.51 if you plan to use the nmap NSE NVTs.
Step 10: Checking presence of optional tools …
OK: pdflatex found.
WARNING: PDF generation failed, most likely due to missing LaTeX packages. The PDF report format will not work.
SUGGEST: Install required LaTeX packages.
OK: ssh-keygen found, LSC credential generation for GNU/Linux targets is likely to work.
OK: rpm found, LSC credential package generation for RPM based targets is likely to work.
OK: alien found, LSC credential package generation for DEB based targets is likely to work.
OK: nsis found, LSC credential package generation for Microsoft Windows targets is likely to work.
OK: SELinux is disabled.

It seems like your OpenVAS-9 installation is OK.

If you think it is not OK, please report your observation
and help us to improve this check routine:
http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss
Please attach the log-file (/tmp/openvas-check-setup.log) to help us analyze the problem.

Here is the check setup for v7 and 8, It really not making any sense if I am using v 9, why they will show here as faulty version?

[root@OpenVAS ~]# openvas-check-setup --v8
openvas-check-setup 2.3.7
Test completeness and readiness of OpenVAS-8
(add ‘–v6’ or ‘–v7’ or ‘–v9’
if you want to check for another OpenVAS version)

Please report us any non-detected problems and
help us to improve this check routine:

Send us the log-file (/tmp/openvas-check-setup.log) to help analyze the problem.

Use the parameter --server to skip checks for client tools
like GSD and OpenVAS-CLI.

Step 1: Checking OpenVAS Scanner …
ERROR: OpenVAS Scanner too old or too new: 5.1.1
FIX: Please install OpenVAS Scanner 5.0.
HINT: Please see the --v6/7/8/9 command line options to check other major versions.

ERROR: Your OpenVAS-8 installation is not yet complete!

Please follow the instructions marked with FIX above and run this
script again.

If you think this result is wrong, please report your observation
and help us to improve this check routine:
http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss
Please attach the log-file (/tmp/openvas-check-setup.log) to help us analyze the problem.

[root@OpenVAS ~]# openvas-check-setup --v7
openvas-check-setup 2.3.7
Test completeness and readiness of OpenVAS-7

Please report us any non-detected problems and
help us to improve this check routine:

Send us the log-file (/tmp/openvas-check-setup.log) to help analyze the problem.

Use the parameter --server to skip checks for client tools
like GSD and OpenVAS-CLI.

Step 1: Checking OpenVAS Scanner …
ERROR: OpenVAS Scanner too old or too new: 5.1.1
FIX: Please install OpenVAS Scanner 4.0.
HINT: Please see the --v6/7/8/9 command line options to check other major versions.

ERROR: Your OpenVAS-7 installation is not yet complete!

Please follow the instructions marked with FIX above and run this
script again.

If you think this result is wrong, please report your observation
and help us to improve this check routine:
http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss
Please attach the log-file (/tmp/openvas-check-setup.log) to help us analyze the problem.

Any help will be appreciated as this thing is always let me down on a demo day

Thank you

MEMA
openVAS%20check%20Setup

2

Hi,

if you compare those versions with the recent releases of OpenVAS / GVM 9 listed here:

you can see that those are quite outdated. It could be possible that your seen issue is already solved in the most recent versions. Unfortunately Atomic currently seems to have some issues with building newer packages:

3

Hi cfi,

thank you for the input, so the best way is to compile it from source code?

Thank you very much.

MEMA

4

Hi all,

those need to be installed in any particular order or can it be totally random?

Regards

MEMA

5

The INSTALL files in each module provide hints for building.
A sensible sequence is smb(optional), libs, scanner, manager, gsa.

2 Likes
6

Morning Jan,

thank you for the suggestion, that was what I was looking for, a sequence suggestion. The OS that I am familiar with is CentOS would that be recommended platform?

Have a great day.

MEMA

7

Well, the recommended platform is Greenbone OS, of course.

It is a Debian derivative and Greenbone has a natural focus to get all working in this world.

1 Like