[IntelMQ-dev] Structural change in one feed's events output by the Shadowserver Parser bot?

Mika Silander mika.silander at csc.fi
Fri May 5 13:03:00 CEST 2023


Hi all,

 Testing with intelmq 3.1.0 and specifically its Shadowserver Parser bot. I've become used to being able to read in an event output by this bot as plain JSON with the json libraries bundled in python3, but now I came across one event sample where this fails. The feed is Accessible Traversal Utilities for NAT. The troublemaker event contained the field extra.amplification, and it was output by the bot as a dict structure like

'extra.amplification': Decimal("5.2")

 whereas I expected the field value to be a string "5.2" or number 5.2.

 Please let me know what I've missed again. A json library update?

Br and have a nice weekend, Mika


More information about the IntelMQ-dev mailing list