Re: Stability of nessus DB scheme

Michael Boman wrote:
> How stable is the nessus DB scheme (not code, the scheme itself). Really
> want to get the reports in the DB, so I am thinking about cooking up
> a XML->DB parser for now until DB code is release quality.. I however
> don't want to get the wonderful task of re-converting them again once
> the DB scheme is out, so I wonder how "stable" the DB scheme is.. is it
> more or less ready-to-use, or?

It is, as you say, more or less ready to use. There are some quirks that 
need fixing (see the TODO) which are planned, however. In any case, the 
schema needs to undergo testing in the sense that someone has to take 
reports, move them to a database and start trying to extract information 
and see if the queries make any sense.

For this task I developed a tool to parse NBE files into a database. If 
you want to, check out the import-nbe script under 
nessus-tools/nessus-extract/

You will also find there a list of tools to generate automatically the 
"stable" tables of the schema, ie:

- the services/protocol tables (using create-service-proto.pl)
- the plugins table (using nessus-extract).

All these have been modified in the NESSUS_SQL branch:
http://cvs.nessus.org/cgi-bin/cvsweb.cgi/nessus-tools/nessus-extract/?hideattic=0&only_with_tag=NESSUS_SQL#dirlist

I would appreciate it if you could forward to the list the results of 
your tests.

Hope I have answered all your questions.


Javi