problem with updateplugins.pl (inprotect Inst-Man step 12)
Simon Meggle
meggles at tbk-patent.de
Wed Dec 1 15:15:37 EST 2004
Hi Dave,
the problem is that the inprotect interface doesnt let me configure
anything, i get the error message:
"Please run updateplugins.pl script first before using web interface."
So i try to run updateplugins.pl for a week now... :-)
Would be great if you could help me running this script. I never changed
anything despite of the comment/uncomment in line 104 and 106 (the known
bug....)
Thanks a lot!!
Simon
Dave King wrote:
> Hi Simon-
> Don't worry about the finish error showing up in the logs, it's
> just a warning. As far as the other part, it looks like it's not
> correctly reading info from your config file (or it's reading it, but
> it's blank). The command should read something like this:
>
> /usr/local/bin/nessus -qxpS localhost 1241 username password >
> /tmp/plugins.sql
>
> The config file should be in /usr/local/etc/inprotect.cfg, make sure
> that has the correct settings.
>
> Laters,
> Dave
>
> Simon Meggle wrote:
>
>> Hi Dave,
>> first: thanks for your help!
>>
>> (I have tested temporarly with the original updateplugins.pl script,
>> plus
>> line 104 and 106 editing. No success - same return line on the shell,
>> same
>> log entry.)
>>
>>
>> Without any further editing of the .pl file, the updateplugins.log
>> shows:
>> --- cut ---
>> Can't call method "finish" on an undefined value at updateplugins.pl
>> line
>> 354.
>> --- cut ---
>>
>> Line 354 is:
>>
>> --- cut ---
>> # Cleanup statement handles
>> #$sth_sel2->finish();
>> 354==> $sth_sel3->finish();
>>
>> disconn_db($dbh);
>>
>> #end of main
>> }
>> --- cut ---
>>
>> After adding "your" 'print' command, clearing the logfile and
>> executing the
>> script again, the log contains:
>> --- cut ---
>> /usr/local/bin/nessus -qxpS > /tmp/plugins.sql #->caused by the
>> modifcaton of the script
>> Can't call method "finish" on an undefined value at updateplugins.pl
>> line
>> 356.
>> --- cut ---
>>
>> Is line 1 the output you expectet - or is it wrong?
>>
>> Thank you very much!
>>
>> Simon
>>
>>
>> -----Ursprüngliche Nachricht-----
>> Von: daveInprotect at davewking.com [mailto:daveInprotect at davewking.com]
>> Gesendet: Mittwoch, 1. Dezember 2004 08:44
>> An: Simon Meggle
>> Betreff: Re: AW: problem with updateplugins.pl (inprotect Inst-Man step
>> 12)
>>
>>
>> Glad I could help. Looks like something strang is happening on line
>> 114. For some reason it thinks it's either gettting too many or not
>> enough parameters. First I would check out /var/logs/updateplugins.log
>> to see if it can give any hints. If not, then you can try adding this
>> on line 112 (between the if ($updateplugins==1) and the #Dump Nessus
>> plugins . . .)
>>
>> print "$CONFIG{'NESSUSPATH'} -qxpS $nessusserver $nessusport $nessususer
>> $nessuspassw > $tempfile";
>>
>> (this is just line 114 but with a print instead of a system). This
>> will print the command it's trying to run to the log file. Look at this
>> and make sure it has all the right settings and nothing funny on it.
>> Also, I guess there's a chance that when you modified it before that
>> some other problem was introduced, so you may try simply replacing the
>> it with a clean one, and then fixing the comments.
>>
>> Laters,
>> Dave King
>>
>> Simon Meggle wrote:
>>
>>
>>
>>> Hi Dave, hi everybody,
>>> that worked for me, thank you.
>>> Executing updateplugins.pl now takes much more time than before -
>>> nothing
>>>
>>
>> to
>>
>>
>>> worry about; that gives me the hope that something is going on...
>>> But - after 4-5 minutes there ist another problem :-)
>>> The script ends with one line i can't explain:
>>> --- cut ---
>>> [root at ntbk bin]# perl updateplugins.pl
>>> list-sessions only requires -q host port user pass
>>> [root at ntbk bin]#
>>> --- cut ---
>>> Can you / or anybody explain what's wrong?
>>>
>>> Thank you very much,
>>> Simon
>>>
>>>
>>> -----Ursprüngliche Nachricht-----
>>> Von: daveInprotect at davewking.com [mailto:daveInprotect at davewking.com]
>>> Gesendet: Dienstag, 30. November 2004 17:50
>>> An: Simon Meggle
>>> Betreff: Re: problem with updateplugins.pl (inprotect Inst-Man step 12)
>>>
>>>
>>> This is a bug in Inprotect 0.20. You need to comment out line 106 and
>>> uncomment line 104.
>>>
>>> Laters,
>>> Dave King
>>>
>>>
>>> Simon Meggle wrote:
>>>
>>>
>>>
>>>
>>>
>>>> Hello,
>>>> i have installed inprotect on a red hat 9 machine with the following
>>>> packets:
>>>> PHP 4.3.9
>>>> Apache 2
>>>> Perl 5.8.0
>>>> nessus 2.2
>>>> inprotect 0.20
>>>>
>>>> I followed the installation manual of inprotect, but on step 12
>>>> (running
>>>> updateplugins.pl) i have big problems. After exectuting
>>>> updateplugins.pl i
>>>> can see in the logfile:
>>>> ---- cut ----
>>>> Tue Nov 30 16:31:24 2004 updateplugins: No new plugins installed at
>>>> updateplugins.pl line 106.
>>>> ---- cut ----
>>>>
>>>>
>>>>
>>>> Line 106 in updateplugins.pl is:
>>>> ---- cut ----
>>>> #execute nessus-update-plugins
>>>> #system ("nessus-update-plugins") == 0 or print localtime(time)."
>>>> updateplugins: No new plugins installed";
>>>> #If used patch for nessus-update-plugins, we may pass
>>>> parameter on
>>>> the command line.
>>>> 106==> system ("nessus-update-plugins.141 -u
>>>> $inprotect_url/nessus") == 0
>>>> or die localtime(time)." updateplugins: No new plugins installed";
>>>>
>>>> #Sleep 30 sec, allow nessusd to restart
>>>> sleep 30;
>>>> ---- cut ----22
>>>>
>>>> Please, can oyu help me?
>>>>
>>>> Greets from Munich,
>>>>
>>>> Simon
>>>>
>>>>
>>>> _______________________________________________
>>>> Nessus mailing list
>>>> Nessus at list.nessus.org
>>>> http://mail.nessus.org/mailman/listinfo/nessus
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>
>>> _______________________________________________
>>> Nessus mailing list
>>> Nessus at list.nessus.org
>>> http://mail.nessus.org/mailman/listinfo/nessus
>>>
>>>
>>>
>>>
>>>
>>
>>
>>
>> _______________________________________________
>> Nessus mailing list
>> Nessus at list.nessus.org
>> http://mail.nessus.org/mailman/listinfo/nessus
>>
>>
>>
>>
More information about the Nessus
mailing list