I am trying to convert a nessus file to a more useful report, something like this: Severity, Finding, Hosts, Associated CVEs Critical, RHSA-2012-0465: libsmbclient, (ip1, ip2), CVE-20xx-yyyy Query: for $x in //Report/ReportHost/ReportItem let $finding := string-join(data($x/cve),", ") where $x/risk_factor = "Critical" group by $finding order by $finding return for $x in //Report/ReportHost/ReportItem let $finding1 := string-join(data($x/cve),", ") let $host := data($x/../@name) where $finding1=$finding group by $finding1 order by $finding1 return <finding> <cve>{$finding1}</cve> <host>{$host}</host> </finding> Error: Improper use? Potential bug? Your feedback is welcome: Contact: basex-talk@mailman.uni-konstanz.de Version: BaseX 7.2.1 Java: Oracle Corporation, 1.7.0 OS: Windows 7, amd64 Stack Trace: java.lang.ClassCastException: org.basex.query.item.DBNodeSeq cannot be cast to org.basex.query.item.ANode org.basex.query.path.AxisPath.iter(AxisPath.java:273) org.basex.query.QueryContext.iter(QueryContext.java:275) org.basex.query.flwor.For$1.init(For.java:120) org.basex.query.flwor.For$1.next(For.java:84) org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:320) org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:295) org.basex.query.QueryContext.iter(QueryContext.java:275) org.basex.query.expr.ParseExpr.value(ParseExpr.java:69) org.basex.query.QueryContext.value(QueryContext.java:286) org.basex.query.flwor.Order.add(Order.java:76) org.basex.query.flwor.GroupPartition.ret(GroupPartition.java:148) org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:302) org.basex.query.QueryContext.iter(QueryContext.java:275) org.basex.query.QueryContext.iter(QueryContext.java:229) org.basex.query.QueryContext.execute(QueryContext.java:448) org.basex.query.QueryProcessor.execute(QueryProcessor.java:94) org.basex.core.cmd.AQuery.query(AQuery.java:86) org.basex.core.cmd.XQuery.run(XQuery.java:22) org.basex.core.Command.run(Command.java:325) org.basex.core.Command.exec(Command.java:304) org.basex.core.Command.execute(Command.java:76) org.basex.gui.GUI.exec(GUI.java:390) org.basex.gui.GUI$6.run(GUI.java:342) v/r, David Brown Fully Qualified Navy Certification Agent LSS Certified Blackbelt, CISSP, NSA-IAM/IEM, MSCIS SPAWARSYSCEN ATLANTIC ISS LOB SSC Lead Email: <mailto:david.k.brown1@navy.mil> david.k.brown1@navy.mil Phone: 843.218.6227 DSN: 588.6227 Fax: 843.218.5461 "Let us not look back in anger or forward in fear, but around in awareness." James Thurber
Thanks for your feedback and sorry for the delay. The bug should be fixed; please have a look at one of the latest stable snapshots: http://files.basex.org/releases/latest/ Hope this helps, Christian ___________________________ On Fri, May 11, 2012 at 8:29 PM, Brown, David (SSC-A) <david.k.brown1@navy.mil> wrote:
I am trying to convert a nessus file to a more useful report, something like this: Severity, Finding, Hosts, Associated CVEs
Critical, RHSA-2012-0465: libsmbclient, (ip1, ip2), CVE-20xx-yyyy
Query: for $x in //Report/ReportHost/ReportItem
let $finding := string-join(data($x/cve),", ")
where $x/risk_factor = "Critical"
group by $finding
order by $finding
return
for $x in //Report/ReportHost/ReportItem
let $finding1 := string-join(data($x/cve),", ")
let $host := data($x/../@name)
where $finding1=$finding
group by $finding1
order by $finding1
return
<finding>
<cve>{$finding1}</cve>
<host>{$host}</host>
</finding>
Error: Improper use? Potential bug? Your feedback is welcome:
Contact: basex-talk@mailman.uni-konstanz.de
Version: BaseX 7.2.1
Java: Oracle Corporation, 1.7.0
OS: Windows 7, amd64
Stack Trace:
java.lang.ClassCastException: org.basex.query.item.DBNodeSeq cannot be cast to org.basex.query.item.ANode
org.basex.query.path.AxisPath.iter(AxisPath.java:273)
org.basex.query.QueryContext.iter(QueryContext.java:275)
org.basex.query.flwor.For$1.init(For.java:120)
org.basex.query.flwor.For$1.next(For.java:84)
org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:320)
org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:295)
org.basex.query.QueryContext.iter(QueryContext.java:275)
org.basex.query.expr.ParseExpr.value(ParseExpr.java:69)
org.basex.query.QueryContext.value(QueryContext.java:286)
org.basex.query.flwor.Order.add(Order.java:76)
org.basex.query.flwor.GroupPartition.ret(GroupPartition.java:148)
org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:302)
org.basex.query.QueryContext.iter(QueryContext.java:275)
org.basex.query.QueryContext.iter(QueryContext.java:229)
org.basex.query.QueryContext.execute(QueryContext.java:448)
org.basex.query.QueryProcessor.execute(QueryProcessor.java:94)
org.basex.core.cmd.AQuery.query(AQuery.java:86)
org.basex.core.cmd.XQuery.run(XQuery.java:22)
org.basex.core.Command.run(Command.java:325)
org.basex.core.Command.exec(Command.java:304)
org.basex.core.Command.execute(Command.java:76)
org.basex.gui.GUI.exec(GUI.java:390)
org.basex.gui.GUI$6.run(GUI.java:342)
v/r,
David Brown
Fully Qualified Navy Certification Agent
LSS Certified Blackbelt, CISSP, NSA-IAM/IEM, MSCIS
SPAWARSYSCEN ATLANTIC ISS LOB SSC Lead
Email: david.k.brown1@navy.mil
Phone: 843.218.6227 DSN: 588.6227 Fax: 843.218.5461
“Let us not look back in anger or forward in fear, but around in awareness.” James Thurber
_______________________________________________ BaseX-Talk mailing list BaseX-Talk@mailman.uni-konstanz.de https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk
participants (2)
-
Brown, David (SSC-A) -
Christian Grün