Hi guys,
Are there any plans for some sort of SQL output for the mainstream
nessus client? Currently we're using a modified nbe-output.c to export
directly to mysql, but this is not ideal because in order to update
nessus I have to rehack that nbe-output file as well as some of the
make/configuration files. It would also be nice to have a way to change
my database password without having to recompile nessus.
I'm not sure whether I'd want it to actually do SQL direct to a
database, or if I'd want to make it just export a file with SQL
statements in it. Having a file of generic SQL that fit a predefined
schema would allow more flexibility in what database servers you used,
because rather than linking against a specific database you just get a
file to slurp in to the database when you are done. This step would
easily be handled by the shell script I'm using to call nessus from the
command line anyway.
Is there a plan for such a feature in the future? If there isn't, why
not? If I wrote the necessary code to handle the output, Renaud, would
there be any hope of getting it put in the main nessus distribution?
Thanks for the advice,
Joe
--
Joe Francis
Honeywell - Cyber Security
816-997-5872
Are there any plans for some sort of SQL output for the mainstream
nessus client? Currently we're using a modified nbe-output.c to export
directly to mysql, but this is not ideal because in order to update
nessus I have to rehack that nbe-output file as well as some of the
make/configuration files. It would also be nice to have a way to change
my database password without having to recompile nessus.
I'm not sure whether I'd want it to actually do SQL direct to a
database, or if I'd want to make it just export a file with SQL
statements in it. Having a file of generic SQL that fit a predefined
schema would allow more flexibility in what database servers you used,
because rather than linking against a specific database you just get a
file to slurp in to the database when you are done. This step would
easily be handled by the shell script I'm using to call nessus from the
command line anyway.
Is there a plan for such a feature in the future? If there isn't, why
not? If I wrote the necessary code to handle the output, Renaud, would
there be any hope of getting it put in the main nessus distribution?
Thanks for the advice,
Joe
--
Joe Francis
Honeywell - Cyber Security
816-997-5872