Re: [opennms-devel] Nessus Integration - Who is working on this now? Anyone?

[Deven P. <dph...@ez...>]

Thanks,

    Tarus had already sent me a copy of this procedure. I appreciate it=20
though!!

Deven

On this day, 11/30/2004 10:53 AM,  the esteemed Siddhartha Jain replied,=20
with the utmost intelligence

> --- Matt Brozowski <br...@op...> wrote:=20
> =20
>
>>>P.S. Work like that could induct you into the top
>>>     =20
>>>
>>secret Order of The =20
>>   =20
>>
>>>Green Polo.
>>>     =20
>>>
>>SHHHH!!!!!
>>   =20
>>
>
>In 1.1.2, I got vulnscand working this way:
>
>Here's what I did to get vulnscand to work (well,
>almost).
>
>1. Applied the patch related to bug#810.
>2. In $OPENNMS_HOME/etc/vulnscand-configuration.xml, i
>specified the server name, server-port,
>server-username, server-password, status and
>scan-level.
>----snip---------------------------
>[root@tux-sid etc]# more vulnscand-configuration.xml
><?xml version=3D"1.0"?>
><vulnscand-configuration
>        rescan-frequency=3D"86400000"
>        initial-sleep-time=3D"300000"
>        max-suspect-thread-pool-size=3D"3"
>        max-rescan-thread-pool-size=3D"3"
>        server-address=3D"localhost"
>        server-port=3D"1241"
>        server-username=3D"sid"
>        server-password=3D"xxxx"
>        status=3D"true"
> =20
>
>
>        <managed-interfaces
>                status=3D"true"
>                scan-level=3D"2"
>        />
>.
>.
>.
>--------------------------------
>
>
>3. In the nessusd config, add this line to the end:
>-----------------
>ssl_version =3D none
>-----------------
>
>You need to do this because the OpenNMS nessus client
>speaks only in cleartext.
>
>4. Start nessusd (after having creating a user)
>5. restart OpenNMS.
>
>Now I see in events that each vulnerability found is
>reported. However, funnily its scanning only the
>localhost!! So I still have to figure out why it does
>that. And then maybe instead of reporting the
>vulnerabilities discovered as events, we could add a
>per node vuln assessment report.
>
>Hope this helps,
>
>Siddhartha
>
>=3D=3D=3D=3D=3D
>The Bombay Amateur Photographers Club
>http://groups.yahoo.com/group/tbapc/
>
>My Online Photo Gallery
>http://losttoy.fpic.co.uk/
>
>
>	=09
>___________________________________________________________=20
>Moving house? Beach bar in Thailand? New Wardrobe? Win =A310k with Yahoo=
! Mail to make your dream a reality.=20
>Get Yahoo! Mail www.yahoo.co.uk/10k
>
>
>-------------------------------------------------------
>SF email is sponsored by - The IT Product Guide
>Read honest & candid reviews on hundreds of IT Products from real users.
>Discover which products truly live up to the hype. Start reading now.=20
>http://productguide.itmanagersjournal.com/
>_______________________________________________
>opennms-devel mailing list
>ope...@li...
>https://lists.sourceforge.net/lists/listinfo/opennms-devel
>
>
> =20
>