Re: detached scans and email reports

On Thu, Jul 10, 2003 at 08:35:34AM -0400, Nathan R. Valentine wrote:

> I'd like to modify the code s.t. a user can choose to have an .nbe file
> emailed to them as a results of a detached scan. 

Perhaps you've considered a shell script approach and rejected it.  If
not, though, it would allow you to email results easily, without the
need to patch Nessus.  Also, if your detached scans are also continuous,
realize that two drawbacks of such scans vis-a-vis a shell script
approach is that a detached scan is "lost" if the daemon is restarted
and there's no way to incorporate new plugins into a scan once it's
started. 

>  - where/how the results file that is emailed is generated.

Look in nessus-core/nessusd/detached.c.  A scratch file for the email is
opened in detached_setup_mail_file() and then results are written to
that file descriptor in detached_copy_data_port() and
detached_copy_data_content().  I would imagine if you want to modify the
format of the report, you'd need to modify these last two functions. 

>  - where the plugin results are recorded/collected before the results
> file is generated.

They're stored in a buffer, as NTP messages.  See detached_copy_data(). 


George
-- 
[email protected]

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/DbFF7ZziPz0vGWERAkr2AJ0WSix4ZYcRhjTaqGjS/mTVvsLjWgCfbCdy
nnkdOd5jidGiRdC19jAGXv8=
=fnVE
-----END PGP SIGNATURE-----