InsightVM Implementation Issue: Encountering Java Error and "npcap not available" Message

InsightVM
1

Hello everyone,

I’ve been encountering an issue with InsightVM and hoped someone in this community might be able to provide some assistance. It’s affecting all our Nexpose consoles and scan engines at regular intervals, and is causing a significant disruption to our operations.

The problem specifically manifests itself in the form of Java error messages, usually accompanied by an additional notification stating “npcap is not available”. The scans fail whenever this happens, and the only workaround we can currently implement is a system reboot, which is clearly not a sustainable solution.

A sample error message that we recently received is as follows:

2024-01-19T01:00:03 [WARN] [Thread: Scan 3362] [Site: Discovery Site DMZ] root must be a directory
java.lang.IllegalArgumentException: root must be a directory
at com.rapid7.extension.ExtensionClassLoader.<init>(Unknown Source)
at com.rapid7.extension.JavaExtensionHandler.createClassLoader(Unknown Source)
at com.rapid7.extension.JavaExtensionHandler.loadExtension(Unknown Source)
at com.rapid7.extension.ExtensionHandler.prepare(Unknown Source)
at com.rapid7.extension.ExtensionHandler.prepare(Unknown Source)
at com.rapid7.extension.ExtensionManager.prepareExtension(Unknown Source)
at com.rapid7.assessment.plugin.DefaultPluginContext.loadPlugin(DefaultPluginContext.java:123)
at com.rapid7.nexpose.scan.ScanUtils.loadJessPlugins(Unknown Source)
at com.rapid7.nexpose.scan.ScanUtils.loadScanPlugins(Unknown Source)
at com.rapid7.nexpose.scan.Scan.start(Unknown Source)
at com.rapid7.nexpose.scan.Scan.run(Unknown Source)
at java.lang.Thread.run(Thread.java:750)

EDIT:

Here are some logs for the version:

Scan engine version: 6.6.233
2024-01-19T01:00:01 [INFO] [Thread: Scan 3362] [Site: Discovery Site DMZ] Newest Content Version Loaded: 1.1.2558
2024-01-19T01:00:01 [INFO] [Thread: Scan 3362] [Site: Discovery Site DMZ] Oldest Content Version Loaded: 1.1.2558
2

@AimanElAaqdi did you ever find a solution for this? Running into the exact same error where scans are failing.

Error:

2024-08-23T14:42:56 [INFO] [Thread: Scan 35254] [Site: [REDACTED]] Scan failed: java.lang.ClassCastException: com.rapid7.extension.JavaExtensionHandler cannot be cast to com.rapid7.extension.IExtension
	at com.rapid7.extension.JavaExtensionHandler.newInstance(Unknown Source)
	at com.rapid7.extension.JavaExtensionHandler.loadExtension(Unknown Source)
	at com.rapid7.extension.ExtensionHandler.prepare(Unknown Source)
	at com.rapid7.extension.ExtensionHandler.prepare(Unknown Source)
	at com.rapid7.extension.ExtensionManager.getExtensionNames(Unknown Source)
	at com.rapid7.assessment.plugin.DefaultPluginContext.installedPlugins(DefaultPluginContext.java:71)
	at com.rapid7.nexpose.scan.ScanUtils.loadScanPlugins(Unknown Source)
	at com.rapid7.nexpose.scan.Scan.start(Unknown Source)
	at com.rapid7.nexpose.scan.Scan.run(Unknown Source)
	at java.lang.Thread.run(Thread.java:750)

Version Info:

2024-08-23T14:42:56 [INFO] [Thread: Scan 35254] [Site: [REDACTED]] Newest Content Version Loaded: 1.1.3265
2024-08-23T14:42:56 [INFO] [Thread: Scan 35254] [Site: [REDACTED]] Oldest Content Version Loaded: