On Tuesday 02 March 2010 17:09:47 Dražen Popović wrote: > On Tue, 2010-03-02 at 14:31 +0100, Jan-Oliver Wagner wrote: > > the intention is not to introduce LUA as another language for OpenVAS. > > The intention is to easily add the existing NSEs into the OpenVAS NVT > > Feed, thus to provide users with a uniform interface for running NASL, > > OVAL and NSE scripts. > > I understand all that. Why this issue was little confusing for me is > because the big portion of the NSE repository is already covered by > OV/NASL, at least the relevant part. Other scripts we could port to NASL > without much pain. I'm not sure how big/broad will NSE repository become > in the future but I seriously doubt that it will reach OVs. Taking all
Although people disagree, I expect NSE to become big (am open for bets regarding available number/coverage of NSE until next devcon). But clearly it wasnt designed as language-to-write-NVTs-for-the-openvas-framework. While it is debatable how much effort it would be to change or adopt the design and who would benefit how much from it, priorities of the devs are set towards other things right now. > that into consideration, I concluded that you gentlemen wish to > complement NASL with Lua/NSE and thus extend both the OVs and NMAPs > plugin rep. Otherwise the gain/pain ration for simply using NSEs written > by NMAP gang would be too small (IMHO of course). The proposal in Change Request #44 (http://openvas.org/openvas-cr-44.html) is quite straight-forward: call nmap as separate process with one (or many?) NSEs and report the output. I expect relatively few pain, but relatively much future gain. -- felix -- Felix Wolfsteller | ++49 541 335083-783 | http://www.intevation.de/ PGP Key: 39DE0100 Intevation GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 18998 Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner _______________________________________________ Openvas-plugins mailing list [email protected] http://lists.wald.intevation.org/mailman/listinfo/openvas-plugins
