I believe, with the help of CFI in #openvas, that the issue is because of the QoD. The hits found in the GCE are showing a QoD of 75% but if we look it up on secinfo.greenbone.net, it shows a QoD of 30%. Is there a reason that the GCE would have a different QoD than OpenVAS or what the website would show? Here are some links that may help:
https://ibb.co/e4bEex shows the difference between my scans with OpenVAS on the left and the GCE on the right. Notice how the "OpenSSH Multiple Vulnerabilities has a QoD of 75%? https://secinfo.greenbone.net/omp?token=guest&cmd=get_info&info_type=nvt&filter=1.3.6.1.4.1.25623.1.0.806052 shows it to only be 30%. Same thing with "OpenSSH Denial of Service and User Enumeration Vulnerabilities (Linux)". 75% in the scan and only 30% at the web site: https://secinfo.greenbone.net/omp?token=63c528c2-3c1b-11e8-9dba-0050568d6d9a&cmd=get_info&info_type=nvt&filter=1.3.6.1.4.1.25623.1.0.809154 Why would my GCE have a difference QoD for some of these results than what shows on the website? Stewart Joseph LEK Technology Consultants 407-877-6505 x1103 www.lekcomp.com -----Original Message----- From: Openvas-discuss <openvas-discuss-boun...@wald.intevation.org> On Behalf Of Stewart Joseph Sent: Tuesday, March 20, 2018 11:30 AM To: Jan-Oliver Wagner <jan-oliver.wag...@greenbone.net>; openvas-discuss@wald.intevation.org Subject: Re: [Openvas-discuss] Trying to decide the right install Thank you. When doing the install, the first time I run greenbone-scapdata-sync I get many "Error: near line xxxxx: database is locked" and "Error: near line xxxxx: NOT NULL constraint failed: affected_products.cve" errors that show. The scripts greenbone-nvt-sync and greenbone-certdata-sync both work fine. If I run any of those 3 again they grab the incremental file list and stops. I assume that is normal? SecInfo Dashboard shows NVTs at 53792, CVEs at 103690, and CERT-Bund at 8739. Could this be why I get so few results? How can I tell if there is a problem with my downloaded feeds? Stewart Joseph, CTO LEK Technology Consultants 407-877-6505 x1103 www.lekcomp.com -----Original Message----- From: Openvas-discuss <openvas-discuss-boun...@wald.intevation.org> On Behalf Of Jan-Oliver Wagner Sent: Tuesday, March 20, 2018 10:09 AM To: openvas-discuss@wald.intevation.org Subject: Re: [Openvas-discuss] Trying to decide the right install Am Montag, 19. März 2018, 16:31:45 schrieb Stewart Joseph: > Thanks. At least I’m making progress. Then what is the difference in > the feeds for the GSMCE and the GCE? http://www.openvas.org/vm.html > indicates that the GSMCE would use the community feeds just like the > GCE. https://www.greenbone.net/en/community-edition/ implies that the > GSMCE has the same as the GSM. Maybe I’m misreading it but they seem > at odds. Which would it have? The GCE default and the Open Source stand-alone modules both use the GCF. The feed content is identical for both setups, but a setup from source code might be missing some build configs, tools or maybe you have older system crypto libraries or alike. -- Dr. Jan-Oliver Wagner | +49-541-760278-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neumarkt 12, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner _______________________________________________ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss _______________________________________________ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss _______________________________________________ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
