[Intelmq-dev] testing tcpcollecor bot 1.1.0rc1

Salehi Ghamsari, Majid majid.salehi.ghamsari at fokus.fraunhofer.de
Thu Jul 5 13:35:40 CEST 2018


Thank you very much for super fast answer, it works well now.
Majid

From: Sebastian Wagner [mailto:wagner at cert.at]
Sent: Donnerstag, 5. Juli 2018 11:34
To: Salehi Ghamsari, Majid <majid.salehi.ghamsari at fokus.fraunhofer.de>; intelmq-dev at lists.cert.at
Subject: Re: [Intelmq-dev] testing tcpcollecor bot 1.1.0rc1


Hi,

Your bot's configuration is missing the parameter `name` which results in the report/event field `feed.name`. Previously the parameter was called `feed`, which is still supported, but none of them is given in your case.

Sebastian

On 2018-07-05 11:27, Salehi Ghamsari, Majid wrote:
Hi,
i try to test the tcpcollector bot, on sender site I send this message
 {
   "feed.accuracy":100.0,
   "feed.name":"FileCollector",
   "feed.url":"file://localhost/opt/intelmq/var/lib/bots/file-input/event.json"<file:///\\localhost\opt\intelmq\var\lib\bots\file-input\event.json>,
   "time.observation":"2018-07-05T08:25:51+00:00",
   "extra.info":"TC_IMQ_Event_001",
   "extra.threat_level_id":"1",
   "raw":"eyJFdmVudCI6IHsiZGlzdHJpYnV0aW9uIjogIjEiLCAiaW5mbyI6ICJUQ19JTVFfRXZlbnRfMDAxIiwgInNoYXJpbmdfZ3JvdXBfaWQiOiAiMCIsICJ0aHJlYXRfbGV2ZWxfaWQiOiAiMSJ9fQ=="
}

On the other site the TcpColltector bot  failed with this message.

Bot has found a problem.
Traceback (most recent call last):
  File "/opt/dev_intelmq/intelmq/lib/bot.py", line 167, in start
    self.process()
  File "/opt/dev_intelmq/intelmq/bots/collectors/tcp/collector.py", line 47, in process
    self.send_message(report)
  File "/opt/dev_intelmq/intelmq/lib/bot.py", line 816, in send_message
    super(CollectorBot, self).send_message(*messages, path=path)
  File "/opt/dev_intelmq/intelmq/lib/bot.py", line 797, in __add_report_fields
    report.add("feed.name", self.parameters.name)
AttributeError: 'Parameters' object has no attribute 'name'

What do I missing?
Regards Majid





_______________________________________________

Intelmq-dev mailing list

Intelmq-dev at lists.cert.at<mailto:Intelmq-dev at lists.cert.at>

https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev



--

// Sebastian Wagner <wagner at cert.at><mailto:wagner at cert.at> - T: +43 1 5056416 7201

// CERT Austria - https://www.cert.at/

// Eine Initiative der nic.at GmbH - https://www.nic.at/

// Firmenbuchnummer 172568b, LG Salzburg
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cert.at/pipermail/intelmq-dev/attachments/20180705/b78b881a/attachment-0001.html>


More information about the Intelmq-dev mailing list