Re: Nessus Database Backend Question

Javier Fernandez-Sanguino <[email protected]>
Newsgroups gmane.comp.security.nessus.devel
Organization Germinus
Message-ID <[email protected]>
Devin Kowatch wrote:
> Hi, 
> A few months ago there was a lot of activity on nessus-devel about
> adding a database backend to Nessus.  I was just wondering what the
> status of this effort was.  I haven't seen much activity on NESSUS_SQL
> or the -devel list regarding this effort recently, is the effort still
> on-going?
> 

It is a little bit stalled, since work has been overwhelming for the 
past two months. In any case, there are several things that have been done:

1.- the database schema has been discussed thoroughly and is mostly 'stable'

2.- there are tools to convert nbe reports to database information 
(tested in PostgreSQL only, though)

3.- there is alpha code to have the Nessus daemon input the information 
to the database (for MySQL and PostgreSQL)

Help is needed testing 1 and 2 (maybe providing MySQL versions for 2) 
and also developing 3 and making it beta code.

> 
> Also, regarding the database schema.  The PLUGIN table uses a
> VARCHAR(15) for the revision.  It's not clear if this is meant to be
> just the number, or if it includes the $Revision stuff as well.  If the
> later then it should be a longer string, as '$Revision: x.Y $' is 16
> characters.  I would suggest at least 18 (incase Y > 10).
> 

It's supposed to be just the number in the $Revision of the plugin, that 
is X.Y. No sense keeping static information that will never change).

Regards

Javi
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.