Howdy,(...)
Therefore, has anyone done something like this properly?
You might want to read the nessus-devel archives [1] and check the NESSUS_SQL branch in the CVS (read the README first [2]). If you want to test it, check out the import-nbe script under nessus-tools/nessus-extract/ [3]
> What I have now is: upload NBE report trough a form, then a little perl script parses it and pipes to psql which stuffs it
into a database. Then there are some php pages for browsing by subnet/host, session, port, plugin_id, etc...
There's a portal (www.inprotect.com) that provides the source code to do something similar to this. Other solutions are described at
http://marc.theaimsgroup.com/?l=nessus-devel&m=104247139102797&w=2
Best regards
Javi
[1] http://marc.theaimsgroup.com/?l=nessus-devel&r=1&w=2 search for "database"
[2] Start off by reading the README file: http://cvs.nessus.org/cgi-bin/cvsweb.cgi/nessus-core/doc/database/Attic/README.txt?hideattic=0&only_with_tag=NESSUS_SQL
[3] Available at http://cvs.nessus.org/cgi-bin/cvsweb.cgi/nessus-tools/nessus-extract/Attic/import-nbe.pl?hideattic=0&only_with_tag=NESSUS_SQL
