John, Thank you for the pointers! What Utin describes sounds more compatible with our needs. We are a small group with specific skills, i.e. Perl, Postgres, and we not much interested in GUI interfaces than in being to mine the database programatically for correlations with our IDS and other network information (already in posrgres).
But thanks, and let me know of any other sources of interest. I meant to ask this in my first note, BTW - is there a standard database schema for a nessus database? There seems to have been a project group working on this but its current status isn't clear to me. -Sherry ------------------------------------------------------------------------- Sherry M. Rogers University of California, Berkeley System & Network Security phone (510)642-7157 ------------------------------------------------------------------------- On Thu, 10 Feb 2005, John Madden wrote: > > what's wrong with these: > > http://enterprise.bidmc.harvard.edu/pub/nessus-php/ > > http://www.inprotect.com > > They use MySQL.... > > > --- "Sherry Rogers, SNS Intrusion Detection" > <[EMAIL PROTECTED]> wrote: > > > > > Mikhail, > > > > This sounds very promising! Is it written in Perl? > > Is it dependent on > > the Linux environment in any way (we run FreeBSD)? > > Would you mind sharing > > it with us? If it works for us we could help with > > documenting it. > > > > Thanks a lot, Sherry > > > > > ------------------------------------------------------------------------- > > Sherry M. Rogers University of > > California, Berkeley > > System & Network Security phone (510)642-7157 > > > ------------------------------------------------------------------------- > > > > > > On Thu, 10 Feb 2005, Utin Mikhail A CONT NPRI wrote: > > > > > Hi there, > > > I developed Nessus database extension application > > taking session file and parsing it into PostgreSQL > > database (running on Linux). It is not a script or a > > database, it is an application having database > > tables (both for scanned data and supplemental), CLI > > interface to everything, and reports. It can be easy > > modified, customized, etc. I was going to provide it > > to Nessus community under GPL, but need to write > > some docs (installation, configuration, interface) > > and clean it out of some very customized stuff > > before giving it to public. So far, it is not an > > automated or automation tool, it needs some very > > minor input after Nessus scan is done, and possibly > > adding reports of you choice. > > > > > > Your questions are welcome. > > > > > > Mikhail Utin > > > AIS Security > > > [EMAIL PROTECTED] > > > 401-832-6584 > > > > > > > > > -----Original Message----- > > > From: Sherry Rogers, SNS Intrusion Detection > > [mailto:[EMAIL PROTECTED] > > > Sent: Wednesday, February 09, 2005 11:53 PM > > > To: [email protected] > > > Subject: Backend Postgres Database? > > > > > > > > > Hello, > > > > > > We would like to store the results of our nessus > > scans directly into > > > a postgres database. This seems like something > > many of you out there > > > must be doing, but I have not been able to find > > much information online. > > > > > > We would really appreciate some help - either on > > list or off. > > > References, scripts, warnings, anything that might > > make this not seem > > > like such dark place to wander.. > > > > > > Thanks, Sherry > > > > > > > > > ------------------------------------------------------------------------- > > > Sherry M. Rogers University of > > California, Berkeley > > > System & Network Security phone > > (510)642-7157 > > > > > > ------------------------------------------------------------------------- > > > > > > _______________________________________________ > > > Nessus mailing list > > > [email protected] > > > http://mail.nessus.org/mailman/listinfo/nessus > > > > > _______________________________________________ > > Nessus mailing list > > [email protected] > > http://mail.nessus.org/mailman/listinfo/nessus > > > > > > > __________________________________ > Do you Yahoo!? > Yahoo! Mail - Easier than ever with enhanced search. Learn more. > http://info.mail.yahoo.com/mail_250 > _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
