[Intelmq-users] ShadowServer Parser bot feedname

Sebastian Wagner wagner at cert.at
Tue Jun 5 11:26:39 CEST 2018


Hi Peter,

On 2018-06-05 11:11, Peter Chan wrote:
> 2018-06-05 10:54:51,880 - ShadowServer-Parser - INFO -
> ShadowserverParserBot initialized with id ShadowServer-Parser and
> intelmq 1.0.3 and python 3.5.2 (default, Nov 23 2017, 16:37:01) as
> process 7223.

Version 1.0.3 is outdated btw.
> I have tried defining different feed names, based on the report name
> from the shadowserver website, but still getting the same error.

Shadowserver itself does not use consistent names unfortunately. Here is
the documentation for the shadowserver parser in intelmq version 1.0.3:
https://github.com/certtools/intelmq/blob/1.0.3/intelmq/bots/parsers/shadowserver/README.md
The feedname you are using in your configuration ("ASN Summary Report")
is not in this list. Have a look at the list and see which feed name
your report corresponds to.

Sebastian

-- 
// Sebastian Wagner <wagner at cert.at> - T: +43 1 5056416 7201
// CERT Austria - https://www.cert.at/
// Eine Initiative der nic.at GmbH - https://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.cert.at/pipermail/intelmq-users/attachments/20180605/4eb7178d/attachment.sig>


More information about the Intelmq-users mailing list