[IntelMQ-dev] Structural change in one feed's events output by the Shadowserver Parser bot?

[Mika Silander]

... looks like I need to do some more debugging. I may have to look in the mirror to find the culprit. Apologies for being so trigger-happy.

Br, Mika

----- Original Message -----
From: "Mika Silander" <mika.silander at csc.fi>
To: "intelmq-dev" <intelmq-dev at lists.cert.at>
Sent: Friday, 5 May, 2023 14:03:00
Subject: [IntelMQ-dev] Structural change in one feed's events output by the Shadowserver Parser bot?

Hi all,

 Testing with intelmq 3.1.0 and specifically its Shadowserver Parser bot. I've become used to being able to read in an event output by this bot as plain JSON with the json libraries bundled in python3, but now I came across one event sample where this fails. The feed is Accessible Traversal Utilities for NAT. The troublemaker event contained the field extra.amplification, and it was output by the bot as a dict structure like

'extra.amplification': Decimal("5.2")

 whereas I expected the field value to be a string "5.2" or number 5.2.

 Please let me know what I've missed again. A json library update?

Br and have a nice weekend, Mika
_______________________________________________
IntelMQ-dev mailing list
https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev
https://intelmq.readthedocs.io/