[Intelmq-dev] testing tcpcollecor bot 1.1.0rc1

Sebastian Wagner wagner at cert.at
Thu Jul 5 12:55:59 CEST 2018


I have now added this parameter in the templates file (bots/BOTS) so for
newly added TCP bots (and an updated intelmq instance) this should not
happen again.
Thanks for reporting, I also found some other minor glitches when
investigating/fixing this.
https://github.com/certtools/intelmq/commit/6e37806f2777a52a2fbb89e61f49a65ef380daba

Sebastian


On 2018-07-05 11:33, Sebastian Wagner wrote:
>
> Hi,
>
> Your bot's configuration is missing the parameter `name` which results
> in the report/event field `feed.name`. Previously the parameter was
> called `feed`, which is still supported, but none of them is given in
> your case.
>
> Sebastian
>
>
> On 2018-07-05 11:27, Salehi Ghamsari, Majid wrote:
>>
>> Hi,
>>
>> i try to test the tcpcollector bot, on sender site I send this message
>>
>>  {
>>
>>    "feed.accuracy":100.0,
>>
>>    "feed.name":"FileCollector",
>>
>>   
>> "feed.url":"file://localhost/opt/intelmq/var/lib/bots/file-input/event.json",
>>
>>    "time.observation":"2018-07-05T08:25:51+00:00",
>>
>>    "extra.info":"TC_IMQ_Event_001",
>>
>>    "extra.threat_level_id":"1",
>>
>>   
>> "raw":"eyJFdmVudCI6IHsiZGlzdHJpYnV0aW9uIjogIjEiLCAiaW5mbyI6ICJUQ19JTVFfRXZlbnRfMDAxIiwgInNoYXJpbmdfZ3JvdXBfaWQiOiAiMCIsICJ0aHJlYXRfbGV2ZWxfaWQiOiAiMSJ9fQ=="
>>
>> }
>>
>>  
>>
>> On the other site the TcpColltector bot  failed with this message.
>>
>>  
>>
>> Bot has found a problem.
>> Traceback (most recent call last):
>>   File "/opt/dev_intelmq/intelmq/lib/bot.py", line 167, in start
>>     self.process()
>>   File "/opt/dev_intelmq/intelmq/bots/collectors/tcp/collector.py", line 47, in process
>>     self.send_message(report)
>>   File "/opt/dev_intelmq/intelmq/lib/bot.py", line 816, in send_message
>>     super(CollectorBot, self).send_message(*messages, path=path)
>>   File "/opt/dev_intelmq/intelmq/lib/bot.py", line 797, in __add_report_fields
>>     report.add("feed.name", self.parameters.name)
>> AttributeError: 'Parameters' object has no attribute 'name'
>>
>>  
>>
>> What do I missing?
>>
>> Regards Majid
>>
>>  
>>
>>
>>
>> _______________________________________________
>> Intelmq-dev mailing list
>> Intelmq-dev at lists.cert.at
>> https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev
>
> -- 
> // Sebastian Wagner <wagner at cert.at> - T: +43 1 5056416 7201
> // CERT Austria - https://www.cert.at/
> // Eine Initiative der nic.at GmbH - https://www.nic.at/
> // Firmenbuchnummer 172568b, LG Salzburg
>
>
> _______________________________________________
> Intelmq-dev mailing list
> Intelmq-dev at lists.cert.at
> https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev

-- 
// Sebastian Wagner <wagner at cert.at> - T: +43 1 5056416 7201
// CERT Austria - https://www.cert.at/
// Eine Initiative der nic.at GmbH - https://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cert.at/pipermail/intelmq-dev/attachments/20180705/6d2835aa/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.cert.at/pipermail/intelmq-dev/attachments/20180705/6d2835aa/attachment.sig>


More information about the Intelmq-dev mailing list