Where inputfile(s) is a space-delimited list of .nbe or .nessus formatted Nessus output files, and outputfile is the name of the OpenDocument text file to which Nessus-Report will write its report. By default, the result will be printed by default to the standard output. The screen-shot below shows a sample of what the output of the –f flag looks like.
The report lists vulnerabilities by severity, with the most critical findings appearing at the top of the table. The Vulnerability Description, Recommendation all come from Nessus' own report; the IP addresses of affected hosts appear in the final column. Run without output options, Nessus-report will show all the hosts identified as having failing this plugin. The listing will appear sorted in Nessus severity, from Critical down through High, Medium, Low and None.
Nessus-report offers several options for report inspection, including printing only vulnerabilities from a specific Nessus plugin, from specific hosts or only findings matching select sensitivities.
Summary While this tool does not take away all of the analysis that is needed when reviewing and documenting Nessus results it does automate some of the more tedious reporting functions. This is just the initial release of the tool and we plan on updating the tool and adding enhancements in the future. If there are any feature requests that you would like to see or if you encounter any issues when using the tool please let us know.