IntelMQ-users November 2019

intelmq-users@lists.cert.at

2 participants
3 discussions

Re: [Intelmq-users] IntelMQ Error
by Sebastian Wagner 02 Dec '19

02 Dec '19

Hi Hatibu, I recommend to upgrade to a newer version, the latest release is 2.1.1. If this is a fresh installation, I recommend to remove the old version and start with the newer instead. Otherwise: It looks like your defaults.conf file (/etc/intelmq/defaults.conf or /opt/intelmq/etc/defaults.conf) is missing the `logging_level` parameter (default value INFO), but maybe there are more values missing. Sebastian On 27/11/2019 06.35, hatibu chande wrote: > Hello Sebastian, > > Yes am using version 1.1.2 > > Hatibu. > > On Tue, Nov 26, 2019 at 5:54 PM Sebastian Wagner <wagner(a)cert.at > <mailto:wagner@cert.at>> wrote: > > Hi, > > You are using IntelMQ version 1.1.2? > > Sebastian > > On 11/26/19 12:52 PM, hatibu chande wrote: >> Hello Guys, >> >> I recently install IntelMQ successfully but it gives >> " Error loading bot queues information: Traceback (most recent >> call last): File "/usr/bin/intelmqctl", line 9, >> in load_entry_point('intelmq==1.1.2', 'console_scripts', >> 'intelmqctl')() File >> "/usr/lib/python3/dist-packages/intelmq/bin/intelmqctl.py", line >> 1225, in main x = IntelMQController(interactive=True) File >> "/usr/lib/python3/dist-packages/intelmq/bin/intelmqctl.py", line >> 380, in __init__ log_level = self.parameters.logging_level >> AttributeError: 'Parameters' object has no attribute >> 'logging_level' SyntaxError: Unexpected token T in JSON at >> position 0" >> >> Can someone help me please. >> >> Hatibu >> > -- > // Sebastian Wagner <wagner(a)cert.at> <mailto:wagner@cert.at> - T: +43 1 5056416 7201 > // CERT Austria - https://www.cert.at/ > // Eine Initiative der nic.at <http://nic.at> GmbH - https://www.nic.at/ > // Firmenbuchnummer 172568b, LG Salzburg > -- // Sebastian Wagner <wagner(a)cert.at> - T: +43 1 5056416 7201 // CERT Austria - https://www.cert.at/ // Eine Initiative der nic.at GmbH - https://www.nic.at/ // Firmenbuchnummer 172568b, LG Salzburg

4 4

IntelMQ Error
by hatibu chande 26 Nov '19

26 Nov '19

Hello Guys, I recently install IntelMQ successfully but it gives " Error loading bot queues information: Traceback (most recent call last): File "/usr/bin/intelmqctl", line 9, in load_entry_point('intelmq==1.1.2', 'console_scripts', 'intelmqctl')() File "/usr/lib/python3/dist-packages/intelmq/bin/intelmqctl.py", line 1225, in main x = IntelMQController(interactive=True) File "/usr/lib/python3/dist-packages/intelmq/bin/intelmqctl.py", line 380, in __init__ log_level = self.parameters.logging_level AttributeError: 'Parameters' object has no attribute 'logging_level' SyntaxError: Unexpected token T in JSON at position 0" Can someone help me please. Hatibu

2 1

IntelMQ 2.1.1 release
by Sebastian Wagner 11 Nov '19

11 Nov '19

Dear community, we again collected a bunch of bugfixes in the last weeks, coming almost one month after 2.1.0. Install documentation: https://github.com/certtools/intelmq/blob/2.1.1/docs/INSTALL.md Upgrade documentation: https://github.com/certtools/intelmq/blob/2.1.1/docs/UPGRADING.md The full changelog: ### Configuration - Default configuration: - Remove discontinued feed "Feodo Tracker Domains" from default configuration. - Add "Feodo Tracker Browse" feed to default configuration. ### Core - `intelmq.lib.pipeline`: AMQP: using port 15672 as default (like RabbitMQ's defaults) for the monitoring interface for getting statistical data (`intelmqctl_rabbitmq_monitoring_url`). - `intelmq.lib.upgrades`: Added a generic upgrade function for harmonization, checking of all message types, it's fields and their types. - `intelmq.lib.utils`: - `TimeoutHTTPAdapter`: A subclass of `requests.adapters.HTTPAdapter` with the possibility to set the timeout per adapter. - `create_request_session_from_bot`: Use the `TimeoutHTTPAdapter` with the user-defined timeout. Previously the timeout was not functional. ### Bots #### Parsers - `intelmq.bots.parsers.shadowserver.parser`: Fix logging message if the parameter `feedname` is not present. - `intelmq.bots.parsers.shodan.parser`: Also add field `classification.identifier` (`'network-scan'`) in minimal mode. - `intelmq.bots.parsers.spamhaus.parser_cert`: Add support for category `'misc'`. - `intelmq.bots.parsers.cymru.parser_cap_program`: - Add support for phishing events without URL. - Add support for protocols >= 143 (unassigned, experiments, testing, reserved), saving the number to extra, as the data would be bogus. - `intelmq.bots.parsers.microsoft.parser_bingmurls`: - Save the `Tags` data as `source.geolocation.cc`. #### Experts - `intelmq.bots.experts.modify.expert`: Fix bug with setting non-string values (#1460). #### Outputs - `intelmq.bots.outputs.smtp`: - Allow non-existent field in text formatting by using a default value `None` instead of throwing errors. - Fix Authentication (#1464). - Fix sending to multiple recipients (#1464). ### Documentation - Feeds: - Fix configuration of `Feodo Tracker Browse` feed. - Bots: - Sieve expert: Document behavior of `!=` with lists. ### Tests - Adaption and extension of the test cases to the changes. ### Tools - `intelmq.bin.intelmqctl`: - check: Check if running the upgrade function for harmonization is necessary. - upgrade-config: Run the upgrade function for harmonization. - `intelmqctl restart` did throw an error as the message for restarting was not defined (#1465). ### Known issues - MongoDB authentication: compatibility on different MongoDB and pymongo versions (#1439) - ctl: shell colorizations are logged (#1436) - http stream collector: retry on regular connection problems? (#1435) - tests: capture logging with context manager (#1342) - Bots started with IntelMQ-Manager stop when the webserver is restarted. (#952) - n6 parser: mapping is modified within each run (#905) - reverse DNS: Only first record is used (#877) - Corrupt dump files when interrupted during writing (#870) -- // Sebastian Wagner <wagner(a)cert.at> - T: +43 1 5056416 7201 // CERT Austria - https://www.cert.at/ // Eine Initiative der nic.at GmbH - https://www.nic.at/ // Firmenbuchnummer 172568b, LG Salzburg

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

IntelMQ-users November 2019