[Intelmq-dev] testing tcpcollecor bot 1.1.0rc1
Salehi Ghamsari, Majid
majid.salehi.ghamsari at fokus.fraunhofer.de
Thu Jul 5 13:35:40 CEST 2018
Thank you very much for super fast answer, it works well now.
Majid
From: Sebastian Wagner [mailto:wagner at cert.at]
Sent: Donnerstag, 5. Juli 2018 11:34
To: Salehi Ghamsari, Majid <majid.salehi.ghamsari at fokus.fraunhofer.de>; intelmq-dev at lists.cert.at
Subject: Re: [Intelmq-dev] testing tcpcollecor bot 1.1.0rc1
Hi,
Your bot's configuration is missing the parameter `name` which results in the report/event field `feed.name`. Previously the parameter was called `feed`, which is still supported, but none of them is given in your case.
Sebastian
On 2018-07-05 11:27, Salehi Ghamsari, Majid wrote:
Hi,
i try to test the tcpcollector bot, on sender site I send this message
{
"feed.accuracy":100.0,
"feed.name":"FileCollector",
"feed.url":"file://localhost/opt/intelmq/var/lib/bots/file-input/event.json"<file:///\\localhost\opt\intelmq\var\lib\bots\file-input\event.json>,
"time.observation":"2018-07-05T08:25:51+00:00",
"extra.info":"TC_IMQ_Event_001",
"extra.threat_level_id":"1",
"raw":"eyJFdmVudCI6IHsiZGlzdHJpYnV0aW9uIjogIjEiLCAiaW5mbyI6ICJUQ19JTVFfRXZlbnRfMDAxIiwgInNoYXJpbmdfZ3JvdXBfaWQiOiAiMCIsICJ0aHJlYXRfbGV2ZWxfaWQiOiAiMSJ9fQ=="
}
On the other site the TcpColltector bot failed with this message.
Bot has found a problem.
Traceback (most recent call last):
File "/opt/dev_intelmq/intelmq/lib/bot.py", line 167, in start
self.process()
File "/opt/dev_intelmq/intelmq/bots/collectors/tcp/collector.py", line 47, in process
self.send_message(report)
File "/opt/dev_intelmq/intelmq/lib/bot.py", line 816, in send_message
super(CollectorBot, self).send_message(*messages, path=path)
File "/opt/dev_intelmq/intelmq/lib/bot.py", line 797, in __add_report_fields
report.add("feed.name", self.parameters.name)
AttributeError: 'Parameters' object has no attribute 'name'
What do I missing?
Regards Majid
_______________________________________________
Intelmq-dev mailing list
Intelmq-dev at lists.cert.at<mailto:Intelmq-dev at lists.cert.at>
https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev
--
// Sebastian Wagner <wagner at cert.at><mailto:wagner at cert.at> - T: +43 1 5056416 7201
// CERT Austria - https://www.cert.at/
// Eine Initiative der nic.at GmbH - https://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cert.at/pipermail/intelmq-dev/attachments/20180705/b78b881a/attachment-0001.html>
More information about the Intelmq-dev
mailing list