[Intelmq-users] shadowserver parser

[Ole Kristoffer Dybvik Apeland]

Hi

We had an issue with shadowserver data today where those feeds that
only provide a download link would yield a php script.
I have spoken with someone connected to the project and they are aware
of the problem.

Is it possible to let the shadowserver parser drop the messages in
these instances?
In it's current form only a warning is given (line 92 in
bots/parsers/shadowserver/parser.py) even though required_fields are
missing in the data.

best regards
Ole Kristoffer
Nkom EkomCERT
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cert.at/pipermail/intelmq-users/attachments/20180706/d05f2d69/attachment.html>