search

ysrc / xunfeng

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
GNU General Public License v3.0
3.53k stars 1.34k forks source link

搜索不到任何主机(已解决) #237

Closed huangyonghome closed 4 years ago

huangyonghome commented 4 years ago

您好.我按照Linux 一条命令安装安装完成后,看到相关的进程都已经正常启动:

[root@scan_server xunfeng]# supervisorctl -c /etc/xunfeng.conf status
xunfeng:xunfeng_aider            RUNNING   pid 15742, uptime 0:48:18
xunfeng:xunfeng_db               RUNNING   pid 15741, uptime 0:48:18
xunfeng:xunfeng_nascan           RUNNING   pid 15743, uptime 0:48:18
xunfeng:xunfeng_vulscan          RUNNING   pid 15745, uptime 0:48:18
xunfeng:xunfeng_web              RUNNING   pid 15744, uptime 0:48:18
[root@scan_server xunfeng]# ps aux | grep xunfeng | grep -v grep
root     15465  0.0  1.4 222176 15232 ?        Ss   11:32   0:05 /usr/bin/python2.7 /bin/supervisord -c /etc/xunfeng.conf
root     15741  0.6  5.0 346412 51784 ?        Sl   15:05   0:20 /opt/xunfeng/xunfengdb/bin/xunfeng_db --bind_ip 127.0.0.1 --port 65521 --dbpath=/var/lib/xunfeng --logpath=/var/log/xunfeng/xunfeng_db.log --auth
root     15744  0.0  1.6 215124 16992 ?        S    15:05   0:00 /usr/bin/python2.7 /bin/gunicorn views.view:app -b 0.0.0.0:80 --log-level info --access-logfile /var/log/xunfeng/xunfeng-access.log
root     15840  0.0  3.2 400548 33068 ?        Sl   15:19   0:01 /usr/bin/python2.7 /bin/gunicorn views.view:app -b 0.0.0.0:80 --log-level info --access-logfile /var/log/xunfeng/xunfeng-access.log

但是我在控制台搜索主机的时候(IP:172.16.10.)搜不到任何主机 image image

在日志路径下也看不到任何scan扫描日志

[root@scan_server xunfeng]# ll /var/log/xunfeng/
总用量 72
-rw-r--r--. 1 root root 48798 10月 28 15:54 xunfeng-access.log
-rw-r--r--. 1 root root  7623 10月 28 15:26 xunfeng_db.log
-rw-r--r--. 1 root root  8653 10月 28 15:05 xunfeng_db.log.2019-10-28T07-05-30
-rw-r--r--. 1 root root  3015 10月 28 15:05 xunfeng.log
[root@scan_server xunfeng]#

以下是xunfeng.log的输出内容

[root@scan_server xunfeng]# tail -f /var/log/xunfeng/xunfeng.log
2019-10-28 15:05:30,282 INFO spawned: 'xunfeng_db' with pid 15741
2019-10-28 15:05:30,286 INFO spawned: 'xunfeng_aider' with pid 15742
2019-10-28 15:05:30,290 INFO spawned: 'xunfeng_nascan' with pid 15743
2019-10-28 15:05:30,295 INFO spawned: 'xunfeng_web' with pid 15744
2019-10-28 15:05:30,362 INFO spawned: 'xunfeng_vulscan' with pid 15745
2019-10-28 15:05:31,397 INFO success: xunfeng_aider entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2019-10-28 15:05:31,397 INFO success: xunfeng_nascan entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2019-10-28 15:05:31,397 INFO success: xunfeng_web entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2019-10-28 15:05:31,397 INFO success: xunfeng_vulscan entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2019-10-28 15:05:31,397 INFO success: xunfeng_db entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)

以下是xunfeng_db的日志

[root@scan_server xunfeng]# tail -f /var/log/xunfeng/xunfeng_db.log
2019-10-28T15:19:53.418+0800 I -        [conn7] end connection 127.0.0.1:60126 (7 connections now open)
2019-10-28T15:19:53.419+0800 I -        [conn6] end connection 127.0.0.1:60124 (6 connections now open)
2019-10-28T15:19:53.584+0800 I NETWORK  [thread1] connection accepted from 127.0.0.1:60156 #8 (6 connections now open)
2019-10-28T15:19:53.584+0800 I NETWORK  [conn8] received client metadata from 127.0.0.1:60156 conn8: { driver: { name: "PyMongo", version: "3.9.0" }, os: { type: "Linux", name: "CentOS Linux 7.5.1804 Core", architecture: "x86_64", version: "3.10.0-862.el7.x86_64" }, platform: "CPython 2.7.5.final.0" }
2019-10-28T15:19:53.585+0800 I NETWORK  [thread1] connection accepted from 127.0.0.1:60158 #9 (7 connections now open)
2019-10-28T15:19:53.585+0800 I NETWORK  [conn9] received client metadata from 127.0.0.1:60158 conn9: { driver: { name: "PyMongo", version: "3.9.0" }, os: { type: "Linux", name: "CentOS Linux 7.5.1804 Core", architecture: "x86_64", version: "3.10.0-862.el7.x86_64" }, platform: "CPython 2.7.5.final.0" }
2019-10-28T15:19:53.592+0800 I ACCESS   [conn9] Successfully authenticated as principal scan on xunfeng
2019-10-28T15:26:32.442+0800 I NETWORK  [thread1] connection accepted from 127.0.0.1:60160 #10 (8 connections now open)
2019-10-28T15:26:32.444+0800 I NETWORK  [conn10] received client metadata from 127.0.0.1:60160 conn10: { driver: { name: "PyMongo", version: "3.9.0" }, os: { type: "Linux", name: "CentOS Linux 7.5.1804 Core", architecture: "x86_64", version: "3.10.0-862.el7.x86_64" }, platform: "CPython 2.7.5.final.0" }
2019-10-28T15:26:32.447+0800 I ACCESS   [conn10] Successfully authenticated as principal scan on xunfeng

操作系统: CentOS 7.5

请问有任何线索吗?

非常感谢 已经解决了.在配置界面关闭ICMP探测,但是在日志目录下仍然没有scan这个日志文件