Hi everyone,
I am mostly performing scans on networks were bandwidth consumption is
critical and should therefore be as low as possible.
>From my first observations, the most bandwidth-intensive part of the scan
is the beginning, were lots of NMAP processes are being triggered, like so:
---openvassd: testing AAA.BBB.CCC.DDD (/var/lib/openvas/plugins/nmap.nasl)
---nmap -n -Pn -oG /tmp/nmap-AAA.BBB.CCC.DDD -sT -sU -p T:1-65535,U: ...
As a consequence, I am looking for a way to lower the "aggressiveness" of
those NMAP processes (see "timing template" of NMAP MANPAGE)
After looking in "/var/lib/openvas/plugins/nmap.nasl" and
"/var/cache/openvas/nmap.nasl.nvti", such a configuration seems possible by
modifying the "Scans Configs" using the "Greenbone" web interface.
But even after switching from "Normal" to "Polite", the command line
arguments remained the same, while I was expecting the option "-T<0-5>" to
appear in those.
Here is my current working config under Debian Stretch 9.3 (Kernel
4.9.0-5-amd64):
ii greenbone-security-assistant 6.0.11+dfsg.1-2
amd64 remote network security auditor - web interface
ii greenbone-security-assistant-common 6.0.11+dfsg.1-2 all
architecture independent files for greenbone-security-assistant
ii libopenvas8 8.0.8-2
amd64 remote network security auditor - shared libraries
ii openvas 6.0.9-2
amd64 remote network security auditor - metapackage
ii openvas-cli 1.4.5-1
amd64 Command Line Tools for OpenVAS
ii openvas-manager 6.0.9-2
amd64 Manager Module of OpenVAS
ii openvas-manager-common 6.0.9-2 all
architecture independent files for openvas-manager
ii openvas-scanner 5.0.7-3
amd64 remote network security auditor - scanner
Thanks in advance for your help,
Regards.
--
Alexandre Brasseur
Quality Assurance Engineer
Escaux
Escaux, Communication as easy as the web
Chaussée de Bruxelles 408, 1300 Wavre, Belgium
Direct: +3227887554
Main: +3226860900
www.escaux.com
Dit bericht is onderworpen aan de voorwaarden beschikbaar op onze website
<https://www.escaux.com/docs/ContractInfo.html>.
Ce message est soumis aux conditions disponibles sur notre site web
<https://www.escaux.com/docs/ContractInfo.html>.
This message is subject to the terms and conditions available on our website
<https://www.escaux.com/docs/ContractInfo.html>.
_______________________________________________
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
