Re: [Openvas-discuss] How to get my reports
Don't you just hate it when you post something and then minutes later
you find the solution right in front of you ...
In create_report_import the file you build to generate the gnupg
signature starts off with:
${UUID}${NAME}${EXTENSION}${CONTENT_TYPE}${SUMMARY}${DESCRIPTION}0 ...
(and if you have params it's
${NAME}${VALUE}${TYPE}${VALUE}${OPTION1}${OPTION2}${OPTION3} ...)
And if you have files the ordering of them is important.
My custom reports work fine now, this is going to be fun :-)
Good to hear someone has it working.
--
Greenbone Networks GmbH
Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460
Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] How to get my reports
Hi, i am working on my final project for my engineer degree, and i am deploying an auditing server with openvas and using alfresco as my reports repository. The problem is that i'd really like to use as much of the openvas capabilities as i can, so i don't need to write complicated scripts or hard-to-mainting things. At this moment this is what i have: 1-I've created a lot of openvas tasks, one per server i want to audit. 2-I've wrote a really-hard-to-mainting perl script that use omp to run all the tasks and control them. I run it with a cron job. 3-When the script detects one of the task is done, it dumps the report to a pdf and save it in my alfresco installation throw cifs. 4-Alfresco process this new file, with some rules i've defined and send massages to the administrator of the server, and some other people that must be aware of the server. I know that with a scheduler i could get step 2 to work, and maybe step 3 with the right escalator. What i would really love is to be able to create my own escalator so i could send my reports to alfresco with it, instead of using my actual schema. Is that possible? What about the CLI??? Until now, my schema works fine, but i'm not comfortable with it. Thanks guys! -- Pavlik Juan José ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] How to get my reports
I know that with a scheduler i could get step 2 to work, and maybe step 3 with the right escalator. What i would really love is to be able to create my own escalator so i could send my reports to alfresco with it, instead of using my actual schema. Is that possible? What about the CLI??? You can create a report format. It's a little tricky, but possible. https://svn.wald.intevation.org/svn/openvas/trunk/openvas-manager/doc/report-format-HOWTO The report format could send the report to alfresco. Then you could use one of the existing escalators to trigger it, I think. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] How to get my reports
Thanks Matthew, that sounds interesting, i'll try it and let you know. El 11 de abril de 2012 15:41, Matthew Mundell matthew.mund...@greenbone.net escribió: I know that with a scheduler i could get step 2 to work, and maybe step 3 with the right escalator. What i would really love is to be able to create my own escalator so i could send my reports to alfresco with it, instead of using my actual schema. Is that possible? What about the CLI??? You can create a report format. It's a little tricky, but possible. https://svn.wald.intevation.org/svn/openvas/trunk/openvas-manager/doc/report-format-HOWTO The report format could send the report to alfresco. Then you could use one of the existing escalators to trigger it, I think. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner -- Pavlik Juan José ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] How to get my reports
I've been reading about creating a new report_format, but i really don't know how i could use it for what i need. I mean, i need to dump the reports in a cifs directory, i have no clue how to do that from a report format. Maybe i could do this: -Use an email escalator, with done task condition, and send the email to localhost. -Parse every mail that comes from openvas, and dump the reports to wherever i need. With this, i woulnd't need to much logic in my perl script, and i could use the openvas scheduler. What do you think? El 11 de abril de 2012 16:09, Juan José Pavlik Salles jjpav...@gmail.comescribió: Thanks Matthew, that sounds interesting, i'll try it and let you know. El 11 de abril de 2012 15:41, Matthew Mundell matthew.mund...@greenbone.net escribió: I know that with a scheduler i could get step 2 to work, and maybe step 3 with the right escalator. What i would really love is to be able to create my own escalator so i could send my reports to alfresco with it, instead of using my actual schema. Is that possible? What about the CLI??? You can create a report format. It's a little tricky, but possible. https://svn.wald.intevation.org/svn/openvas/trunk/openvas-manager/doc/report-format-HOWTO The report format could send the report to alfresco. Then you could use one of the existing escalators to trigger it, I think. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner -- Pavlik Juan José -- Pavlik Juan José ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] How to get my reports
On 4/11/2012 1:41 PM, Matthew Mundell wrote:
I know that with a scheduler i could get step 2 to work, and maybe step 3
with the right escalator. What i would really love is to be able to create
my own escalator so i could send my reports to alfresco with it, instead of
using my actual schema. Is that possible? What about the CLI???
You can create a report format. It's a little tricky, but possible.
https://svn.wald.intevation.org/svn/openvas/trunk/openvas-manager/doc/report-format-HOWTO
The report format could send the report to alfresco. Then you could use
one of the existing escalators to trigger it, I think.
I've got a quick question about custom reports ... I've been playing
around with them today (awesome btw. I underestimated how powerful
custom reports can be) and can't seem to get them working within
OpenVAS. It's been a long day so I'm probably just missing something
obvious, here is what I have tried:
- Used http://www.openvas.org/trusted-nvts.html to set up GPG on the
OpenVAS host, added and signed (trusted) my key , restarted the services
- Following the instructions at
https://svn.wald.intevation.org/svn/openvas/trunk/openvas-manager/doc/report-format-HOWTO
I modified the current HTML report, added a few things and updated
create_report_import with a new name and description for the import
(made sure the files added are in alphabetical order).
- Tested the scripts in the console (generate and the .xls file work
great, the .html is generated)
- I used create_report_import to generate a xml and imported the xml
with the GSA webinterface (and set it to active=yes)
If I try to use the report format in GSA I get an error page, when I
submit the request via OMP I get:
get_reports_response status=400 status_text=GET_REPORTS report
format must be predefined or trusted/get_reports_response
- To test if I did something stupid I checked out
https://svn.wald.intevation.org/svn/openvas/trunk/openvas-manager/report_formats/simple_topo_plot/
, ran create_report_import and imported it's created .xml file. It is
also trusted=no
The predefined report formats all go trusted=yes when I verify them, so
I assume I missed a step with gpg somewhere. If I do a gpg
--homedir=/etc/openvas/gnupg --verify foobar.asc foobar on the openvas
Host, gpg says Good signature (foobar being the
${UUID}${EXTENSION}${CONTENT_TYPE}0${FNAME1}${FILE1}${FNAME2})
The GPG signature is in the report .xml file I import into GSA, do I
also have to put the ${UUID}.asc somewhere specific on the OpenVAS
Server? Or do I have to tell the manager that the gpg stuff is at
/etc/openvas/gnupg/ ?
Anyone who made it through my wall of text and can give me a pointer in
the right direction will save my day :-) (and also save me from going
through the sourcecode tomorrow).
Many Thanks,
Ryan Schulze
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] How to get my reports
On 4/11/2012 10:49 PM, Ryan Schulze wrote:
[ snip me missing the obvious in the logs]
Don't you just hate it when you post something and then minutes later
you find the solution right in front of you ...
In create_report_import the file you build to generate the gnupg
signature starts off with:
${UUID}${NAME}${EXTENSION}${CONTENT_TYPE}${SUMMARY}${DESCRIPTION}0 ...
(and if you have params it's
${NAME}${VALUE}${TYPE}${VALUE}${OPTION1}${OPTION2}${OPTION3} ...)
My custom reports work fine now, this is going to be fun :-)
my bad,
Ryan
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] How to get my reports
Hi, i am working on my final project for my engineer degree, and i am deploying an auditing server with openvas and using alfresco as my reports repository. The problem is that i'd really like to use as much of the openvas capabilities as i can, so i don't need to write complicated scripts or hard-to-mainting things. At this moment this is what i have: 1-I've created a lot of openvas tasks, one per server i want to audit. 2-I've wrote a really-hard-to-mainting perl script that use omp to run all the tasks and control them. I run it with a cron job. 3-When the script detects one of the task is done, it dumps the report to a pdf and save it in my alfresco installation throw cifs. 4-Alfresco process this new file, with some rules i've defined and send massages to the administrator of the server, and some other people that must be aware of the server. I know that with a scheduler i could get step 2 to work, and maybe step 3 with the right escalator. What i would really love is to be able to create my own escalator so i could send my reports to alfresco with it, instead of using my actual schema. Is that possible? What about the CLI??? Until now, my schema works fine, but i'm not comfortable with it. Thanks guys! -- Pavlik Juan José ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
