[Intelmq-users] ShadowServer Parser bot feedname

Peter Chan pchanwork at gmail.com
Tue Jun 5 13:46:30 CEST 2018


Thanks all for the feedback.

I've updated intelmq and using the feed name from the list and seems to be
working - at least not getting errors.

@Thomas, I will have to confirm whether the ASN feeds are still available
now, that used to be a thing.

Just another question regarding the feedname.
Is it possible to define multiple feeds in the feedname parameter like:

"feedname": " Ssl-Scan ", "Ssl-Freak-Scan", " Open-SNMP",

On Tue, 5 Jun 2018 at 11:54, Thomas Hungenberg <th at cert-bund.de> wrote:

> On 05.06.2018 11:26, Sebastian Wagner wrote:
> > The feedname you are using in your configuration ("ASN Summary Report")
> > is not in this list. Have a look at the list and see which feed name
> > your report corresponds to.
>
> A parser for the ASN Summary Report does not yet exist.
> Are those reports still provided by Shadowserver?
> Haven't seen them for a longer time.
>
>
>      - Thomas
>
> CERT-Bund Incident Response & Malware Analysis Team
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cert.at/pipermail/intelmq-users/attachments/20180605/1a64c3e4/attachment.html>


More information about the Intelmq-users mailing list