About test_alive_hosts_only

Scanning / scan configuration
1

Hi,

First of all, I want to use the “test_alive_hosts_only” option but it says in the release notes that it is experimental. Is it still experimental?

And secondly, does this option use the options that we select for the alive test (like “Do a TCP Ping”)?

Thanks

2

If the release notes say it is experimental it is experimental until stated otherwise.

Experimental means it didn’t get enough testing for declaring it stable. You could use it but be careful that you might get unexpected behavior.

3 Likes
3

Experimental also means: If you ask support about a problem you found, we will ask you to switch the experimental feature off. This is because we haven’t got enough experience with this features.

Otherwise you are free to use the feature, it’s faster then the old alive tests and offers the same settings (ICMP, ARP, etc.)

3 Likes
4

what is the difference between the test_alive_hosts_only parameter and the alive_test = CONSIDER_ALIVE that i can set in create_target?

5

test_alive_hosts_only is a setting for the openvas scanner application to use our new alive host detection. It is a global setting and can only be changed via the config file. This new alive host detection is run before all nasl scripts. Only as alive detected hosts will be tested for vulnerabilities.

The consider alive option is a scanner parameter and therefore can be set for each scan. It just deactivates all alive host detection and runs all vulnerability tests against all specified target hosts. No matter if they are available or not.

So you can imagine that a fast and reliable alive host detection is crucial for the speed of a vulnerability test and that’s what you get with the new but still experimental alive detection.

2 Likes
6

Please pardon my ignorance, but where is the openvas.conf file? I can’t seem to find it in my installation. I would like to set the test_alive_hosts_only option. Thank you.

7

You can determine the location where openvas is expecting it (it doesn’t exist by default) via:

openvas -s | grep config_file
8

Thanks!

Now I just need a sample config. :slight_smile:

9

There is no need for a sample config. :slightly_smiling_face:

If the file doesn’t exist a new one could be create with just that setting set to test_alive_hosts_only = yes and openvas takes the internal defaults for all others.

10

Ah silly me!

Thank you! :slight_smile:

1 Like