[Intelmq-users] Bots stopping

Vaclav Bruzek vasek.bruzek at gmail.com
Tue Oct 23 12:50:13 CEST 2018


Hi,
I think that the 'pass' parameter behaviour should be applied here and
retrying forever is the correct approach. Because in my case the monitoring
of the botnet is an issue and bots stopping abruptly is a big headache.

Sincerely,
Václav Brůžek


On Tue, 23 Oct 2018 at 11:47, Sebastian Wagner <wagner at cert.at> wrote:

> Hi,
>
> On 10/10/2018 15.36, Sebastian Wagner wrote:
> > If the error_procedure is pass and there are pipeline problems, the
> > bot stops (in bot.py search for "error_procedure: pass and pipeline
> > problem").
>
>
> Which behavior would you (all readers) expect in this case, after the
> maximum configured retries are reached?
>
> Some possibilities:
>  * Retrying forever. (Comment: The procedure is pass, not retry)
>  * Dumping the message. (Comment: The error is most probably not
> specific to the message)
>  * Stopping. (Current behavior)
>
> Sebastian
>
> --
> // Sebastian Wagner <wagner at cert.at> - T: +43 1 5056416 7201
> // CERT Austria - https://www.cert.at/
> // Eine Initiative der nic.at GmbH - https://www.nic.at/
> // Firmenbuchnummer 172568b, LG Salzburg
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cert.at/pipermail/intelmq-users/attachments/20181023/28159691/attachment.html>


More information about the Intelmq-users mailing list