I was looking to create an abridged report using Nessus 3 for Windows. I
originally thought that I could make an XSL file to put in the report_styles
directory, but in the raw xml files in the Vista
\Users\username\Tenable\Nessus\Reports\*.xml the only fields I see are:
- target (name)
- start_time (time)
- finish_time (time)
- hostname (ip)
- portname (port)
- id (plugin id)
- level (severity)
- desc (up to 20 lines description)
So, a few wishlist items:
1. Include the NASL fields, for instance script_summary, script_name, and
script_family in the XML. This would make an abridged report much easier.
Yes, I could just group everything by "id" currently, but the report wouldn't
make sense as I would have no idea what the "id"-numbered plugin does. It
would also make it much easier to disable a plugin within Nessus based on the
report output.
2. Include the plugin file name in the XML. This would make it easy to figure
out which plugin to modify while debugging a report.
3. Change NASL to break down the script_description into its typical sections
(Synopsis, Description, Risk Factor, Fix, Plugin output, etc). This would make
it possible to remove a lot of unnecessary white space in a report using XSL,
and make it possible in a report to list the generic info once separate from
the per-host specific output, removing a lot of unnecessary repetition.
Thank you,
Chris Covington
--
Chris Covington, ccovington@logis.org<mailto:ccovington@logis.org>
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
