Re: Stability of nessus DB scheme

Javier Fernandez-Sanguino <[email protected]>
Newsgroups gmane.comp.security.nessus.devel
Organization Germinus
Message-ID <[email protected]>
Jeffrey Lim wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On Friday 07 March 2003 16:15, Javier Fernandez-Sanguino wrote:
> 
>>You will also find there a list of tools to generate automatically the
>>"stable" tables of the schema, ie:
>>
>>- the services/protocol tables (using create-service-proto.pl)
>>- the plugins table (using nessus-extract).
>>
> 
> 
> hi Javier, i've taken a look at create-service-proto.pl, and it seems to refer 
> to one file '/var/lib/nessus/services.txt'. I dont believe i have that on the 
> development system that we use. Is this a standard file somewhere?
> 
	Yep. Sorry, that's Debian specific. In your case it will probably be 
/var/nessus/services.txt. It's the file that nessusd creates based on 
nmap's services file and your local /etc/services.
	In any case it has the /etc/services format so you can easily test it 
with that one.


> Additionally, do you happen to have any sql create scripts for the tables that 
> we need for. I see some commented create statements for postgres in 
> nessus-extract.pl (from the url you gave 
> [http://cvs.nessus.org/cgi-bin/cvsweb.cgi/nessus-tools/nessus-extract/?hideattic=0&only_with_tag=NESSUS_SQL#dirlist]
>  ), but no create statements in create-service-proto.pl
> 
> If it helps, i'm using nessus 2.0.1.

The CREATE statement should be taken from the database documentation. 
You will find at:
http://cvs.nessus.org/cgi-bin/cvsweb.cgi/nessus-core/doc/database/?hideattic=0&only_with_tag=NESSUS_SQL#dirlist

a list of sql statements for Postgres and MySQL (Which are made based on 
the schema). Do not use the ones in the script (they are obsolete, I 
will remove them)

Regards

Javi
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.