I am trying to convert a nessus file to a more useful report, something like this: Severity, Finding, Hosts, Associated CVEs
Critical, RHSA-2012-0465: libsmbclient, (ip1, ip2), CVE-20xx-yyyy
Query: for $x in //Report/ReportHost/ReportItem
let $finding := string-join(data($x/cve),", ")
where $x/risk_factor = "Critical"
group by $finding
order by $finding
return
for $x in //Report/ReportHost/ReportItem
let $finding1 := string-join(data($x/cve),", ")
let $host := data($x/../@name)
where $finding1=$finding
group by $finding1
order by $finding1
return
<finding>
<cve>{$finding1}</cve>
<host>{$host}</host>
</finding>
Error: Improper use? Potential bug? Your feedback is welcome:
Contact: basex-talk@mailman.uni-konstanz.de
Version: BaseX 7.2.1
Java: Oracle Corporation, 1.7.0
OS: Windows 7, amd64
Stack Trace:
java.lang.ClassCastException: org.basex.query.item.DBNodeSeq cannot be cast to org.basex.query.item.ANode
org.basex.query.path.AxisPath.iter(AxisPath.java:273)
org.basex.query.QueryContext.iter(QueryContext.java:275)
org.basex.query.flwor.For$1.init(For.java:120)
org.basex.query.flwor.For$1.next(For.java:84)
org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:320)
org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:295)
org.basex.query.QueryContext.iter(QueryContext.java:275)
org.basex.query.expr.ParseExpr.value(ParseExpr.java:69)
org.basex.query.QueryContext.value(QueryContext.java:286)
org.basex.query.flwor.Order.add(Order.java:76)
org.basex.query.flwor.GroupPartition.ret(GroupPartition.java:148)
org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:302)
org.basex.query.QueryContext.iter(QueryContext.java:275)
org.basex.query.QueryContext.iter(QueryContext.java:229)
org.basex.query.QueryContext.execute(QueryContext.java:448)
org.basex.query.QueryProcessor.execute(QueryProcessor.java:94)
org.basex.core.cmd.AQuery.query(AQuery.java:86)
org.basex.core.cmd.XQuery.run(XQuery.java:22)
org.basex.core.Command.run(Command.java:325)
org.basex.core.Command.exec(Command.java:304)
org.basex.core.Command.execute(Command.java:76)
org.basex.gui.GUI.exec(GUI.java:390)
org.basex.gui.GUI$6.run(GUI.java:342)
v/r,
David Brown
Fully Qualified Navy Certification Agent
LSS Certified Blackbelt, CISSP, NSA-IAM/IEM, MSCIS
SPAWARSYSCEN ATLANTIC ISS LOB SSC Lead
Email: mailto:david.k.brown1@navy.mil david.k.brown1@navy.mil
Phone: 843.218.6227 DSN: 588.6227 Fax: 843.218.5461
"Let us not look back in anger or forward in fear, but around in awareness." James Thurber
Thanks for your feedback and sorry for the delay. The bug should be fixed; please have a look at one of the latest stable snapshots:
http://files.basex.org/releases/latest/
Hope this helps, Christian ___________________________
On Fri, May 11, 2012 at 8:29 PM, Brown, David (SSC-A) david.k.brown1@navy.mil wrote:
I am trying to convert a nessus file to a more useful report, something like this: Severity, Finding, Hosts, Associated CVEs
Critical, RHSA-2012-0465: libsmbclient, (ip1, ip2), CVE-20xx-yyyy
Query: for $x in //Report/ReportHost/ReportItem
let $finding := string-join(data($x/cve),", ")
where $x/risk_factor = "Critical"
group by $finding
order by $finding
return
for $x in //Report/ReportHost/ReportItem
let $finding1 := string-join(data($x/cve),", ")
let $host := data($x/../@name)
where $finding1=$finding
group by $finding1
order by $finding1
return
<finding>
<cve>{$finding1}</cve>
<host>{$host}</host>
</finding>
Error: Improper use? Potential bug? Your feedback is welcome:
Contact: basex-talk@mailman.uni-konstanz.de
Version: BaseX 7.2.1
Java: Oracle Corporation, 1.7.0
OS: Windows 7, amd64
Stack Trace:
java.lang.ClassCastException: org.basex.query.item.DBNodeSeq cannot be cast to org.basex.query.item.ANode
org.basex.query.path.AxisPath.iter(AxisPath.java:273)
org.basex.query.QueryContext.iter(QueryContext.java:275)
org.basex.query.flwor.For$1.init(For.java:120)
org.basex.query.flwor.For$1.next(For.java:84)
org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:320)
org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:295)
org.basex.query.QueryContext.iter(QueryContext.java:275)
org.basex.query.expr.ParseExpr.value(ParseExpr.java:69)
org.basex.query.QueryContext.value(QueryContext.java:286)
org.basex.query.flwor.Order.add(Order.java:76)
org.basex.query.flwor.GroupPartition.ret(GroupPartition.java:148)
org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:302)
org.basex.query.QueryContext.iter(QueryContext.java:275)
org.basex.query.QueryContext.iter(QueryContext.java:229)
org.basex.query.QueryContext.execute(QueryContext.java:448)
org.basex.query.QueryProcessor.execute(QueryProcessor.java:94)
org.basex.core.cmd.AQuery.query(AQuery.java:86)
org.basex.core.cmd.XQuery.run(XQuery.java:22)
org.basex.core.Command.run(Command.java:325)
org.basex.core.Command.exec(Command.java:304)
org.basex.core.Command.execute(Command.java:76)
org.basex.gui.GUI.exec(GUI.java:390)
org.basex.gui.GUI$6.run(GUI.java:342)
v/r,
David Brown
Fully Qualified Navy Certification Agent
LSS Certified Blackbelt, CISSP, NSA-IAM/IEM, MSCIS
SPAWARSYSCEN ATLANTIC ISS LOB SSC Lead
Email: david.k.brown1@navy.mil
Phone: 843.218.6227 DSN: 588.6227 Fax: 843.218.5461
“Let us not look back in anger or forward in fear, but around in awareness.” James Thurber
BaseX-Talk mailing list BaseX-Talk@mailman.uni-konstanz.de https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk
basex-talk@mailman.uni-konstanz.de