Re: [Database-devel] questions...

Robert Rich <[email protected]>
Newsgroups gmane.comp.security.nessus.devel
Message-ID <[email protected]>
There is definitely database communication.  Based on some previous 
discussion, i created the db but left it empty and simply allowed 
nessusd to create the schema. 

After three scans (the last one still running), this is the number of 
rows in each table:

executedplugin: 9476
host: 15
hostsession: 54
knowledgebase: 0
service: 0
session: 3
userlist: 0
usersession: 0
vulnerability: 0


Your last point related to 'realtime' status is part of what makes this 
so interesting to me.  I've been watching the tables grow as time 
progresses.  I do see the following in nessus.messages:

$ grep kb nessusd.messages | tail -20 | head -4
[Thu Jan 15 09:30:56 2004][1480] user rrich : new KB will be saved as 
/export/home/rrich/local/var/nessus/users/rrich/kbs/10.10.10.239
[Thu Jan 15 09:30:58 2004][1484] user rrich : new KB will be saved as 
/export/home/rrich/local/var/nessus/users/rrich/kbs/10.10.10.240
[Thu Jan 15 09:31:00 2004][1486] user rrich : new KB will be saved as 
/export/home/rrich/local/var/nessus/users/rrich/kbs/10.10.10.241
[Thu Jan 15 09:31:02 2004][1487] user rrich : new KB will be saved as 
/export/home/rrich/local/var/nessus/users/rrich/kbs/10.10.10.242

Here were my configure args from the build of nessus-core

$ grep CONFIGURE_ARGS nessus.tmpl
CONFIGURE_ARGS =  --prefix=/export/home/rrich/local --enable-release 
--disable-gtk --enable-save-sessions --enable-save-kb 
--with-mysql=/usr/local/mysql --with-x

Is it possible the --enable-save-kb is conflicting?


Javier Fernandez-Sanguino wrote:

> Robert Rich wrote:
>
>> I've been following this thread with interest and have been 
>> building/testing the NESSUS_SQL code.
>> I do have a question that may relate to Jeff's problem.  If i build 
>> nessusd out of NESSUS_SQL, do i have to use the nessus client from 
>> that same codebase?  The system i'm building nessusd on has some gtk 
>> issues, so i've been using both the gtk client and windows (NessusWX) 
>> client from different systems running code from HEAD.  While i 
>> haven't seen any segfaults as indicated by Jeff below, i also have 
>> not seen any data in the knowledgebase table.
>> Thoughts?
>>
>
> There's really no reason why you shouldn't be able to use a different 
> client. Client/server communication is standarised and it should not 
> be affected by the SQL code. We will try to add some debug information 
> in the code in order to see what's going on.
>
> Do you see if there is any database communication at all? (snooping 
> the loopback interface for example) Do you see if the host / session 
> /hostsession tables are being updated when you run a scan?
>
> As a matter of fact you should be albe to see information from the 
> scan in real time when you are using the database code, since the 
> tables are updated when the session starts/ends, while the host is 
> being scanned, etc.
>
> Regards
>
> Javi


_______________________________________________
Nessus-devel mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus-devel
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.