Re: [Database-devel] questions...

Jeff Dell wrote:

> I have been playing with NESSUS_SQL and I have a few questions:
> 
> 1. In he README.txt file it says to use import-nbe.pl to import old nessus
> reports into the database. I can't seem to find it. It is not located where
> it says.

It's available in the nessus-tools CVS directory, branch NESSUS_SQL
http://cvsweb.nessus.org/cgi-bin/cvsweb.cgi/nessus-tools/, more 
precisely in
http://cvsweb.nessus.org/cgi-bin/cvsweb.cgi/nessus-tools/nessus-extract/?only_with_tag=NESSUS_SQL

> 
> 2. How do I start nessus so it utilizes the database?

If you have configured it properly (i.e. 'configure --with-mysql') you 
have to configure nessusd.conf properly with:

db_user = USER_TO_CONNECT_WITH
db_pass = PASSWORD_TO_USE_FOR_CONNECTION
db_host = DATABASE_HOST
db_database = DATABASE_NAME (default name is 'Nessus_Scans')
db_port = REMOTE_DATABASE_PORT (default depends on the DB server)
db_make_tables = yes|no
db_compress = yes|no

This step is not in the readme I will add it there, sorry.
> 
> 3. When extracting the plugins with nessus -qSp it uses a table called
> plugins, when using the script nessus-extract.pl, it uses the table
> nessus-plugindata. Which one is really used by nessus?

Ummm... are you using the nessus_extract.pl from the NESSUS_SQL 
branch? The one from the NESSUS_SQL branch _does_ use the 'PLUGINS' 
table. Since you do not see import_nbe either that might be the reason 
you are seeing those differences.

> 
> 4. Is there any talk about NESSUS_SQL merging in with NESSUS?

As Renaud said, it will probably be added soon (but disabled per 
default since it needs wider testing).

Regards

Javi
_______________________________________________
Nessus-devel mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus-devel