Rebuilding Openvas
- rm -rf /var/lib/openvas/* y /var/cache/openvas/*
- openvas-mkcert -q
- openvas-nvt-sync
- openvas-mkcert-client -n om -i
- /etc/init.d/openvas-manager stop
- /etc/init.d/openvas-scanner stop
- openvassd
- openvasmd --migrate
- openvasmd --rebuild
- killall openvassd
- sleep 15
- /etc/init.d/openvas-scanner start
- /etc/init.d/openvas-manager start
http://openvas.org/install-packages.html#openvas_debian_obs
1 - /etc/init.d/openvas-manager stop ; /etc/init.d/openvas-scanner stop ; /etc/init.d/monit stop ; /etc/init.d/alienvault-redis-server-openvas stop
2 - rm -r /var/cache/openvas/* /var/lib/openvas/plugins/* /var/lib/openvas/mgr/tasks.db /var/lib/openvas/scap-data/* /var/lib/openvas/cert-data/* /var/lib/openvas/CA/* /var/lib/redis/*openvas*
3 - /etc/init.d/alienvault-redis-server-openvas start
4 - apt-get install --reinstall openvas-scanner openvas-manager alienvault-openvas
5 - Just in case, stop the OpenVas processes again (I think installing the packages starts the services):
/etc/init.d/openvas-manager stop ; /etc/init.d/openvas-scanner stop
6 - apt-get install --reinstall alienvault-openvas8-feed
And depending if you have custom profiles, you may need to clone them, so they get replicated to all the sensors and loaded into tasks.db
A la hora de realizar el escaneo, cuando vas a "Environment - vulnerabilities - new scan job...", despues de seleccion los targets deseados, si la carga es mayor de 0% en la seccion "Configuration check results", significa que hay algun escaneo corriendo. Por ejemplo, si el maximo numero de escaneos para un sensor es 5 y hay uno corriendo, la carga será 20%.
Si ese valor se queda bloqueado y necesitamos limpiarlo, podemos probar a resetear redis con estos pasos:
redis-cli
flushdb
page revision: 7, last edited: 04 May 2018 14:17