
Copyright © 2002-2012 Tenable Network Security, Inc.
APPENDIX 1: EXAMPLE PVS.CONF CONFIGURATION FILE
options {
# When adding new port, application, or vulnerability information to
# the PVS model of the observed network, the report-threshold is used
# to limit false positives and reports on ephemeral ports. An item
# will not be reported until it has occurred the specified number
# of times.
report-threshold 3;
# Specify the files into which PVS will write its report information.
# These settings can be overridden at the command line using the -r
# and -x options for the NSR and XML formats, respectively. For
# example, 'pvs -r <report-file>' re-defines the name of the NSR-format
# report file. In addition, HTML reports are generated for web browser
# viewing in the /opt/pvs/var/pvs/reports/html/ directory.
nsr-report-file "/opt/pvs/var/pvs-proxy/scans/pvs-report.nsr";
xml-report-file "/opt/pvs/var/pvs/reports/report.xml";
nessus-report-file "/opt/pvs/var/pvs/reports/report.nessus";
# Specify the version of the nessus report to be written by PVS.
nessus-report-version 2;
# When the following option is enabled, PVS will generate HTML reports.
# generate-html-reports;
# PVS logging. The log-directory keyword specifies a location
# for the pvs binary to write system logs. Log files of the
# format YYYYMM.log (such as 200502.log) will be created. These
# detail PVS operation and can be useful for debugging.
log-directory "/opt/pvs/var/pvs/logs";
# which interface are we listening on ?
interface "eth1";
key-file "/opt/pvs/var/pvs/tenable.key";
#disabled-plugins "/opt/pvs/var/pvs/disabled-plugins.txt";
plugins-directory "/opt/pvs/var/pvs/plugins";
scripts-directory "/opt/pvs/var/pvs/scripts";
# The disabled-scripts keyword specifies a file containing names
# of PASL scripts that should be disabled.
disabled-scripts "/opt/pvs/var/pvs/disabled-scripts.txt";
# The following file can be used to specify plugins that should be
# run in real-time mode. Any plugins listed by ID in the file will
# effectively have the realtime keyword added when they are loaded,
# regardless of whether or not the keyword was originally present.
# realtime-plugins "/opt/pvs/var/pvs/realtime-plugins.txt";
# The max-packet-cache-size keyword specifies the maximum size in
# megabytes of the cache that will be used to store the contents of
# the packets collected. By default it is set to 1024 MB. When the
# cache is full, any subsequent packets captured will be dropped
# until space in the cache becomes available. The size of the cache
# will change dynamically and can be expected to grow to this maximum
# number only when needed. The number configured should not be greater
Comentarios a estos manuales