Thanks a lot Henri,
this confirm my aim, register_product() gives information i need : CPE
, title, Protocol/Port data,
but unfortunately most of plugins don't call it... and use
register_host_detail instead :-(
i can start modify the plugins and propose to commit
but do the dev-plugins will accept the use of register_product, instead
of register_host_detail?
Le 01/06/2012 22:09, Henri Doreau a écrit :
2012/6/1 Sebastien Aucouturier <[email protected]>:
Hi,
is there any reasons for the plugins to use register_host_detail
and not
register_product (and reverse) ?
Hi Sebastien,
even though the code shows that register_product() is just a wrapper
around register_host_detail() both functions have different roles.
- register_host_detail() adds an arbitrary entry to the so-called
"host details database" (AKA asset information DB). You can basically
pass any key/value tuple to this function if you want it to end up in
the host details part of the report.
- register_product() is a convenient way to add information about a
product (an application) to the host details DB. You can only give a
CPE and the location of the application (like "/usr/bin/XXX" or
"3128/tcp") to this function. This is important since it allows
OpenVAS to tell the user about the exact product (cpe, title,
location...) for which a vuln is reported.
See host_details.inc[1].
HTH
Regards.
[1]
https://svn.wald.intevation.org/svn/openvas/trunk/openvas-plugins/scripts/host_details.inc
--
| Sébastien AUCOUTURIER | Software Design Engineer Lead
| ITrust | 55 rue l'Occitane BP 67303 31673 LABEGE CEDEX
| Email: [email protected]
| Fixe Sdt. 05.67.34.67.80 | Fax. 09.80.08.37.23
| IT Security Services & SaaS Editor
_______________________________________________
Openvas-plugins mailing list
[email protected]
http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-plugins
