nessus report caused an error

Friday, 11 May 2012 · 2 messages · last reply 13 May 2012
BS
Brown, David (SSC-A)11 May 2012 22:29 #

I am trying to convert a nessus file to a more useful report, something like this: Severity, Finding, Hosts, Associated CVEs

Critical, RHSA-2012-0465: libsmbclient, (ip1, ip2), CVE-20xx-yyyy

Query: for $x in //Report/ReportHost/ReportItem

               let $finding := string-join(data($x/cve),", ")

where $x/risk_factor = "Critical"

group by $finding

order by $finding

return

                              for $x in //Report/ReportHost/ReportItem

                                             let $finding1 :=
string-join(data($x/cve),", ")

                                             let $host := data($x/../@name)

where $finding1=$finding

group by $finding1

order by $finding1

return

                                             <finding>

<cve>{$finding1}</cve>

<host>{$host}</host>

                                             </finding>

Error: Improper use? Potential bug? Your feedback is welcome:

Contact: basex-talk at mailman.uni-konstanz.de

Version: BaseX 7.2.1

Java: Oracle Corporation, 1.7.0

OS: Windows 7, amd64

Stack Trace:

java.lang.ClassCastException: org.basex.query.item.DBNodeSeq cannot be cast to org.basex.query.item.ANode

org.basex.query.path.AxisPath.iter(AxisPath.java:273)

org.basex.query.QueryContext.iter(QueryContext.java:275)

org.basex.query.flwor.For$1.init(For.java:120)

org.basex.query.flwor.For$1.next(For.java:84)

org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:320)

org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:295)

org.basex.query.QueryContext.iter(QueryContext.java:275)

org.basex.query.expr.ParseExpr.value(ParseExpr.java:69)

org.basex.query.QueryContext.value(QueryContext.java:286)

org.basex.query.flwor.Order.add(Order.java:76)

org.basex.query.flwor.GroupPartition.ret(GroupPartition.java:148)

org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:302)

org.basex.query.QueryContext.iter(QueryContext.java:275)

org.basex.query.QueryContext.iter(QueryContext.java:229)

org.basex.query.QueryContext.execute(QueryContext.java:448)

org.basex.query.QueryProcessor.execute(QueryProcessor.java:94)

org.basex.core.cmd.AQuery.query(AQuery.java:86)

org.basex.core.cmd.XQuery.run(XQuery.java:22)

org.basex.core.Command.run(Command.java:325)

org.basex.core.Command.exec(Command.java:304)

org.basex.core.Command.execute(Command.java:76)

org.basex.gui.GUI.exec(GUI.java:390)

org.basex.gui.GUI$6.run(GUI.java:342)

v/r,

David Brown

Fully Qualified Navy Certification Agent

LSS Certified Blackbelt, CISSP, NSA-IAM/IEM, MSCIS

SPAWARSYSCEN ATLANTIC ISS LOB SSC Lead

Email: <mailto:david.k.brown1 at navy.mil> david.k.brown1 at navy.mil

Phone: 843.218.6227 DSN: 588.6227 Fax: 843.218.5461

"Let us not look back in anger or forward in fear, but around in awareness." James Thurber

CG
Christian Grün13 May 2012 18:59 #

Thanks for your feedback and sorry for the delay. The bug should be fixed; please have a look at one of the latest stable snapshots:

http://files.basex.org/releases/latest/

Hope this helps, Christian

Quoted text · David (SSC-A) · 136 lines
On Fri, May 11, 2012 at 8:29 PM, Brown, David (SSC-A) <david.k.brown1 at navy.mil> wrote: > I am trying to convert a nessus file to a more useful report, something like > this: Severity, Finding, Hosts, Associated CVEs > > Critical, RHSA-2012-0465: libsmbclient, (ip1, ip2), CVE-20xx-yyyy > > > > Query: for $x in //Report/ReportHost/ReportItem > > let $finding := string-join(data($x/cve),", ") > > where $x/risk_factor = "Critical" > > group by $finding > > order by $finding > > return > > for $x in //Report/ReportHost/ReportItem > > let $finding1 := > string-join(data($x/cve),", ") > > let $host := data($x/../@name) > > where $finding1=$finding > > group by $finding1 > > order by $finding1 > > return > > <finding> > > > <cve>{$finding1}</cve> > > > <host>{$host}</host> > > </finding> > > Error: Improper use? Potential bug? Your feedback is welcome: > > Contact: basex-talk at mailman.uni-konstanz.de > > Version: BaseX 7.2.1 > > Java: Oracle Corporation, 1.7.0 > > OS: Windows 7, amd64 > > Stack Trace: > > java.lang.ClassCastException: org.basex.query.item.DBNodeSeq cannot be cast > to org.basex.query.item.ANode > > org.basex.query.path.AxisPath.iter(AxisPath.java:273) > > org.basex.query.QueryContext.iter(QueryContext.java:275) > > org.basex.query.flwor.For$1.init(For.java:120) > > org.basex.query.flwor.For$1.next(For.java:84) > > org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:320) > > org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:295) > > org.basex.query.QueryContext.iter(QueryContext.java:275) > > org.basex.query.expr.ParseExpr.value(ParseExpr.java:69) > > org.basex.query.QueryContext.value(QueryContext.java:286) > > org.basex.query.flwor.Order.add(Order.java:76) > > org.basex.query.flwor.GroupPartition.ret(GroupPartition.java:148) > > org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:302) > > org.basex.query.QueryContext.iter(QueryContext.java:275) > > org.basex.query.QueryContext.iter(QueryContext.java:229) > > org.basex.query.QueryContext.execute(QueryContext.java:448) > > org.basex.query.QueryProcessor.execute(QueryProcessor.java:94) > > org.basex.core.cmd.AQuery.query(AQuery.java:86) > > org.basex.core.cmd.XQuery.run(XQuery.java:22) > > org.basex.core.Command.run(Command.java:325) > > org.basex.core.Command.exec(Command.java:304) > > org.basex.core.Command.execute(Command.java:76) > > org.basex.gui.GUI.exec(GUI.java:390) > > org.basex.gui.GUI$6.run(GUI.java:342) > > > > v/r, > > David Brown > > Fully Qualified Navy Certification Agent > > LSS Certified Blackbelt, CISSP, NSA-IAM/IEM, MSCIS > > SPAWARSYSCEN ATLANTIC ISS LOB SSC Lead > > Email: david.k.brown1 at navy.mil > > Phone: 843.218.6227 DSN: 588.6227 Fax: 843.218.5461 > > “Let us not look back in anger or forward in fear, but around in awareness.” > James Thurber > > > > > > > _______________________________________________ > BaseX-Talk mailing list > BaseX-Talk at mailman.uni-konstanz.de > https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk >

⚡Generated with XQuery