hammackj/risu — Issue #50: reporting and host normalization (getting rid of duplicate Hosts)
Author: emory
Created: 2012-01-31 21:28:20+00:00
State: open

# Issue

When reporting against nessus data, a finding such as 'Apache < 2.0.55 Multiple Vulnerabilities' can exist on a number of ports per host, but currently risu will point out every occurrence of a host with a finding, and when that includes tcp ports 80, 443, 8080 and who knows where else, the findings reported will appear inflated and potentially annoy the recipient.

# Question/Workarounds?

How should a user of risu write their templates to normalize hosts (hostname or IP address) when running reports like notable_vulnerabilities or technical_findings?

Is there presently a way to do this?