#!perl
print CLIENT <<EOF;
<HTML>
<HEAD>
<SCRIPT language="JavaScript">
  function movepic(img_name,img_src) {
  document[img_name].src=img_src;
}
</SCRIPT>
<title> SARA Corrections and Drops</title>
<LINK REV="made" HREF="mailto:sara\@arc.com">
</HEAD>
<BODY>
EOF
if ($pi_menu) {
  $screen = &$pi_menu;
} else {
  $screen = print_menu();
}
$screen =~ s/\\n/\n/g;
print CLIENT $screen;
print CLIENT <<EOF;
</TD><TD valign=top>
<h2>SARA Report Writer</H2>
<HR>
<H2>What about this ReportWriter ?</H2>
<P>
The ReportWriter is designed to generate HTML, XML, and CSV documents which are
easy to import into Micosoft Word, and Excel.  When properly imported
into Microsoft Word, all hyperlinks are preserved.  
<P>
The ReportWriter options are selected through the
ReportWriter with the following:
<UL>
<LI> <B>SARA Report in HTML</B>:  ReportWriter will generate a report that
includes a bar chart, subnet summary, host, details, vulnerability summary,
and a list of applicable tutorials 
chart, scan summary table, scan details, and vulnerability tutorials.
<P>
<LI> <B>SARA Report in XML</B>:  ReportWriter will generate an XML rendition of
the scan data.
<P>

<LI><B>SARA Report in CSV</B>:  ReportWriter will generate a comma delimited list 
of vulnerabilities.
<P>
<LI><B>Use Default Report Parameters</B>:  ReportWriter will generate a report 
item on each host scanned, regardless of status.
<P>
<LI><B>Select Report Options</B>: ReportWriter will base the report on the 
checkboxes selected.
<P>
<UL>
<LI><B><I>Correct Report IAW config/correctionsbilities Found</I></B>: If 
enabled in config/sara.cf (default), ReportWriter will identify as false
positives vulnerabilities that match the criteria in rules/corrections.
<LI><B><I>Exclude hosts with no vulnerabilities</I></B>:  Hosts that have 
services but no vulnerabilities will not be included in the report HTML reports
only.
</UL><P>
<LI><B><I>Regenerate</I></B>:  The report.html, report.xml, and report.csv are
normally generated as part of the scan.  However, changes to the data after the scan
will not be included in the report unless the reports are regenerated.
</UL>
<P>
<H2>How do I convert to a Word Document ?</H2>
<P>
The Report Writer is tailored to generate documents that are easily 
imported to Microsoft Word.  For instance, bookmarks and hyperlinks are
set to conform to Microsoft's strange conventions.
<P>
The following are the steps to generate a Word friendly report:
<UL>
<P>
<LI>You can change the look and content of the report my editing config/htm.cf and xml.cf.However, extreme care should be exercised when editing these files.
<LI>Select the ReportWriter under "SARA Reporting and Analysis" and 
follow the instructions described above.
<LI>Open the corresponding report.html (in results/&lt;database&gt; in Microsoft Word and immediately save it as a Word
document.
<LI>We have had good luck formatting it with the following:
<UL>
<LI>Perform a Edit -> Select All
<LI>Perform a Format -> Font -> Set Font size to 10
<LI>Perform a Format -> Paragraph
<UL>
<LI> Set Spacing (Before and After) to 0 pt
<LI> Set Line Spacing to "At Least"
</UL>
<LI> Replace all instances of END OF SECTION with a Manual Page Break.
<LI>Save the document.
</UL>
</UL><P>
Please Note that links of documents saved by Internet Explorer in remote
access mode will not work.  IE insists on expanding all local references to 
full URLs.
</TD></TR></TABLE>
<P>
<HR>
</BODY>
</HTML>
EOF
