YUCK! Sorry about the word rap on that, each line begins with the "define"
Bob > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] On Behalf Of Bob Mahan > Sent: Friday, June 28, 2002 4:27 PM > To: [EMAIL PROTECTED] > Subject: RE: Report generator wish list > > > FYI - > > For report generation, I have been using a tool called "sgrep" > http://www.cs.helsinki.fi/u/jjaakkol/sgrep.html that allows > me to query a Nessus XML document and has been very handy. > The Output then gets run into "awk" for reporting. Not a lot > of Bells and Whistles, but it works :) > > Below are the sgrep macros (normally stored in .sgreprc) that > define the Nessus results: > > define(NESS_RPTSTART,( start or (("\n<report ") extracting > ("\n" in "\n<report ") ) )) define(NESS_RPTEND,( "/report>" > or end ) )) define(NESS_REPORT,( NESS_RPTSTART ._ > (NESS_RPTEND or end) )) define(NESS_INFO,( "<info" .. > "/info>" in NESS_REPORT )) define(NESS_NESSUSD,( "<nessusd" > .. "/nessusd>" in NESS_INFO )) define(NESS_CONFIG,( "<config" > .. "/config>" in NESS_REPORT )) define(NESS_SCANNERS,( > "<scanners" .. "/scanners>" in NESS_CONFIG )) > define(NESS_PLUGINS,( "<plugins" .. "/plugins>" in > NESS_REPORT )) define(NESS_PLUGIN,( "<plugin" .. "/plugin>" > in NESS_PLUGINS )) define(NESS_RESULTS,( "<results" .. > "/results>" in NESS_REPORT )) define(NESS_RESULT,( "<result" > .. "/result>" in NESS_RESULTS )) define(NESS_RESULT_HOST,( > "<host " .. ( "/host>" or "/result>" ) in > NESS_RESULT)) > define(NESS_RESULT_HOSTL,( "<host " .. "/>" in > NESS_RESULT_HOST )) define(NESS_RESULT_HOST_NAME,( "name=" .. > NESS_QT in NESS_RESULT_HOSTL > )) > define(NESS_RESULT_HOST_IP,( "ip=" .. "\\\" " in > NESS_RESULT_HOSTL )) define(NESS_RESULT_PORTS,( "<ports" .. > "/ports>" in NESS_RESULT_HOST )) define(NESS_RESULT_PORT,( > "<name" .. ("<name" or "/ports>") in NESS_RESULT_PORTS )) > define(NESS_RESULT_PORT_NAME,( "<name" .. "/name>" in NESS_RESULT_PORT > )) > define(NESS_RESULT_PORT_NUMB,( "<number" .. "/number>" in > NESS_RESULT_PORT )) define(NESS_RESULT_PORT_PROT,( "<proto" > .. "/proto>" in NESS_RESULT_PORT > )) > define(NESS_RESULT_PORT_NOTE,( "<port" .. "/port>" in NESS_RESULT_PORT > )) > define(NESS_RESULT_PORT_INFO,( "<information" .. > "/information>" in NESS_RESULT_PORT_NOTE )) > define(NESS_RESULT_PORT_SEV,( "<severity" .. "/severity>" in > NESS_RESULT_PORT_INFO )) define(NESS_RESULT_PORT_ID,( "<id" > .. "/id>" in NESS_RESULT_PORT_INFO )) > define(NESS_RESULT_PORT_DATA,( "<data" .. "/data>" in > NESS_RESULT_PORT_INFO )) > define(NESS_RECORD,(NESS_RESULT_HOSTL or > NESS_RESULT_PORT_NAME or NESS_RESULT_PORT_NUMB or > NESS_RESULT_PORT_PROT or NESS_RESULT_PORT_SEV or > NESS_RESULT_PORT_ID or NESS_RESULT_PORT_DATA )) > > > Bob Mahan > Network Security Operations > Phone: (847) 571-5525 > mailto:[EMAIL PROTECTED] > http://www.nsoco.com > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED]] On Behalf Of Russ Foster > > Sent: Friday, June 28, 2002 11:41 AM > > To: [EMAIL PROTECTED] > > Subject: Report generator wish list > > > > > > I have been working on a perl script that takes NBE output > > and writes an HTML page with variable options (how to sort, > > what to print/not to print, > > etc.) > > > > Currently, ths script is far from public usable...but at some > > point I'd like to hand it out for all to use/see/improve. > > > > Don't anyone get their hopes up...but what would you like to > > see in a report generator? > > > > -rjf > > > >
