Re: Nessus Database Backend Question
Javier Fernandez-Sanguino <[email protected]>
| Newsgroups | gmane.comp.security.nessus.devel |
|---|---|
| Organization | Germinus |
| Message-ID | <[email protected]> |
Devin Kowatch wrote: > Hi, > A few months ago there was a lot of activity on nessus-devel about > adding a database backend to Nessus. I was just wondering what the > status of this effort was. I haven't seen much activity on NESSUS_SQL > or the -devel list regarding this effort recently, is the effort still > on-going? > It is a little bit stalled, since work has been overwhelming for the past two months. In any case, there are several things that have been done: 1.- the database schema has been discussed thoroughly and is mostly 'stable' 2.- there are tools to convert nbe reports to database information (tested in PostgreSQL only, though) 3.- there is alpha code to have the Nessus daemon input the information to the database (for MySQL and PostgreSQL) Help is needed testing 1 and 2 (maybe providing MySQL versions for 2) and also developing 3 and making it beta code. > > Also, regarding the database schema. The PLUGIN table uses a > VARCHAR(15) for the revision. It's not clear if this is meant to be > just the number, or if it includes the $Revision stuff as well. If the > later then it should be a longer string, as '$Revision: x.Y $' is 16 > characters. I would suggest at least 18 (incase Y > 10). > It's supposed to be just the number in the $Revision of the plugin, that is X.Y. No sense keeping static information that will never change). Regards Javi