I saw no category for the GVM 20.08 VirtualBox image, so I posted it here.
I installed the image, configured it, downloaded the latest feeds.
Tryed to do a hostscan of one host at first, but it was interrupted after 0 % (repeatedly)
I have been looking, but can not find out why, there is no logging and no error.
Is your ospd-openvas daemon running? At least it should log something if it tries to start a scan.
What does gvmd logs says? I have just killed my ospd-openvas daemon, and a scan is set as interrupted. The gvmd log says:
md manage:WARNING:2021-04-15 07h49.31 UTC:22254: Could not connect to Scanner at /var/run/ospd/openvas.sock
md manage:WARNING:2021-04-15 07h49.31 UTC:22254: OSP start_scan 264e0394-4fc6-43ed-9bb4-0b4106f234ad: Could not connect to Scanner
event task:MESSAGE:2021-04-15 07h49.31 UTC:22254: Status of task MyTask (4625a0be-f8e9-4dcc-becf-381045ccf910) has changed to Done
event task:MESSAGE:2021-04-15 07h49.31 UTC:22254: Status of task MyTask (4625a0be-f8e9-4dcc-becf-381045ccf910) has changed to Interrupted
The same result with the new Trial 20.08.8.
Settings:
IPv4 enabled
DNS unset
Global Gateway unset
I can ping and connect through ssh to the server I want to do the host discovery to, from the VirualBox VM.
Here is a list of processes running:
-- Logs begin at Thu 2021-04-15 05:49:55 UTC. --
Apr 19 10:58:08 gsm systemd[1]: Started Journal Service.
Apr 19 10:58:08 gsm systemd[1]: Started Flush Journal to Persistent Storage.
Apr 19 10:58:09 gsm systemd[1]: systemd-udevd.service: Main process exited, code=killed, status=6/ABRT
Apr 19 10:58:09 gsm systemd[1]: systemd-udevd.service: Failed with result 'watchdog'.
Apr 19 10:58:09 gsm systemd[1]: systemd-udevd.service: Service has no hold-off time (RestartSec=0), scheduling restart.
Apr 19 10:58:09 gsm systemd[1]: systemd-udevd.service: Scheduled restart job, restart counter is at 1.
Apr 19 10:58:09 gsm systemd[1]: Stopped udev Kernel Device Manager.
Apr 19 10:58:09 gsm systemd[1]: Starting udev Kernel Device Manager...
Apr 19 10:58:09 gsm systemd-udevd[2218]: Network interface NamePolicy= disabled on kernel command line, ignoring.
Apr 19 10:58:09 gsm systemd[1]: Started udev Kernel Device Manager.
Apr 19 11:00:17 gsm gsad[463]: gsad gmp[463]: Authentication success for 'kees' from 192.168.178.70
Apr 19 11:00:22 gsm gvmd[2299]: Status of task artemis (5f55d9cd-6bd9-4989-9ad5-746abde4874e) has changed to Requested
Apr 19 11:00:22 gsm gvmd[2299]: Task artemis (5f55d9cd-6bd9-4989-9ad5-746abde4874e) has been requested to start by kees
Apr 19 11:00:23 gsm ospd-openvas[556]: OSPD[550] INFO: (ospd.command.command) Scan 4e580af1-01d3-4169-8d8a-e256b43b03ce added to the queue in position 1.
Apr 19 11:00:23 gsm gvmd[2304]: Status of task artemis (5f55d9cd-6bd9-4989-9ad5-746abde4874e) has changed to Queued
Apr 19 11:00:27 gsm ospd-openvas[556]: OSPD[550] INFO: (ospd.ospd) Currently 1 queued scans.
Apr 19 11:00:27 gsm ospd-openvas[556]: OSPD[550] INFO: (ospd.ospd) Starting scan 4e580af1-01d3-4169-8d8a-e256b43b03ce.
Apr 19 11:00:27 gsm sudo[2348]: ospd : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/openvas -s
Apr 19 11:00:27 gsm sudo[2348]: pam_unix(sudo:session): session opened for user root by (uid=0)
Apr 19 11:00:27 gsm sudo[2348]: pam_unix(sudo:session): session closed for user root
Apr 19 11:00:27 gsm sudo[2350]: ospd : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/openvas --scan-start f6b295a2-4f59-47d1-98cc-89eb4d00cbbd
Apr 19 11:00:27 gsm sudo[2350]: pam_unix(sudo:session): session opened for user root by (uid=0)
Apr 19 11:00:27 gsm openvas[2351]: sd main[2351]: openvas 20.8.2 started
Apr 19 11:00:28 gsm gvmd[2304]: Status of task artemis (5f55d9cd-6bd9-4989-9ad5-746abde4874e) has changed to Running
Apr 19 11:00:39 gsm sudo[2350]: pam_unix(sudo:session): session closed for user root
Apr 19 11:00:39 gsm ospd-openvas[2343]: OSPD[550] ERROR: (ospd_openvas.daemon) Task 4e580af1-01d3-4169-8d8a-e256b43b03ce was unexpectedly stopped or killed.
Apr 19 11:00:39 gsm ospd-openvas[2343]: OSPD[550] INFO: (ospd.ospd) 4e580af1-01d3-4169-8d8a-e256b43b03ce: Host scan finished.
Apr 19 11:00:39 gsm ospd-openvas[2343]: OSPD[550] INFO: (ospd.ospd) 4e580af1-01d3-4169-8d8a-e256b43b03ce: Host scan finished. Progress: 0, Status: RUNNING
Apr 19 11:00:39 gsm ospd-openvas[2343]: OSPD[550] INFO: (ospd.ospd) 4e580af1-01d3-4169-8d8a-e256b43b03ce: Scan interrupted.
Apr 19 11:00:43 gsm ospd-openvas[556]: OSPD[550] INFO: (ospd.ospd) 4e580af1-01d3-4169-8d8a-e256b43b03ce: Scan process is dead and its progress is 0
Apr 19 11:00:43 gsm ospd-openvas[556]: OSPD[550] INFO: (ospd.ospd) 4e580af1-01d3-4169-8d8a-e256b43b03ce: Scan interrupted.
Apr 19 11:00:43 gsm ospd-openvas[556]: OSPD[550] INFO: (ospd.ospd) 4e580af1-01d3-4169-8d8a-e256b43b03ce: Scan process is dead and its progress is 0
Apr 19 11:00:43 gsm ospd-openvas[556]: OSPD[550] INFO: (ospd.ospd) 4e580af1-01d3-4169-8d8a-e256b43b03ce: Scan interrupted.
Apr 19 11:00:43 gsm ospd-openvas[556]: OSPD[550] INFO: (ospd.ospd) 4e580af1-01d3-4169-8d8a-e256b43b03ce: Scan process is dead and its progress is 0
Apr 19 11:00:43 gsm ospd-openvas[556]: OSPD[550] INFO: (ospd.ospd) 4e580af1-01d3-4169-8d8a-e256b43b03ce: Scan interrupted.
Apr 19 11:00:43 gsm ospd-openvas[556]: OSPD[550] INFO: (ospd.ospd) 4e580af1-01d3-4169-8d8a-e256b43b03ce: Scan process is dead and its progress is 0
Apr 19 11:00:43 gsm ospd-openvas[556]: OSPD[550] INFO: (ospd.ospd) 4e580af1-01d3-4169-8d8a-e256b43b03ce: Scan interrupted.
Apr 19 11:00:43 gsm gvmd[2304]: Status of task artemis (5f55d9cd-6bd9-4989-9ad5-746abde4874e) has changed to Interrupted
I looks like: Apr 19 11:00:39 gsm ospd-openvas[2343]: OSPD[550] ERROR: (ospd_openvas.daemon) Task 4e580af1-01d3-4169-8d8a-e256b43b03ce was unexpectedly stopped or killed.
was the cause. Does not give any clue as far as I can see…
Finally got it running, AFAICT the problem was that I ran the tasks as a normal user, when I run them as admin, they run and finish as planned. @Martin, maybe an error can be reported that it is not possible to run a task as a normal user?
I am not able to reproduce this behaviour.
Are you using the default “User” role, or a custom configured role?
And are you starting the task via the (Advanced) Task Wizard, or are you creating a task by hand?
This indicates a misconfigured setting, or a problem with the target hosts definition.
Did you configure the task setting “Network Source Interface” for the scan task?
And if possible, may we see the hosts and excluded hosts of the scan target for debugging purposes?
@Martin, I have been testing and finally found out what I did wrong in those scans, I filled in the Network Source Interface with the IP address the webserver is running on, since it was open, I didn;t know what else to put there. Once I leave it open, it worked correctly.
So it is a user error I guess, no fault in GSM.
The “Network Source Interface” setting was available in the web interface via the “New Task” or “Edit Task” dialogs.
Please note that this setting has since been deprecated and removed for all currently supported versions of our products, so you will most likely not see it anymore. If you still see it, you must upgrade to a supported version.