[Intelmq-users] ShadowServer Parser bot feedname

[Sebastian Wagner]

Hi,

On 2018-06-05 13:46, Peter Chan wrote:
> Just another question regarding the feedname.
> Is it possible to define multiple feeds in the feedname parameter like:
>
> "feedname": " |Ssl-Scan| ", "|Ssl-Freak-Scan|", " |Open-SNMP|",

No, as the parser needs to know what feed to expect to parse it
correctly. That would not be possible with multiple feed names given.
You need to create multiple collectors/parsers.

It might sound strange that the parser can't detect the feed, but as
feeds look very similar and the csv headers change regularly, this would
result in wrongly parsed feeds otherwise.

Sebastian

-- 
// Sebastian Wagner <wagner at cert.at> - T: +43 1 5056416 7201
// CERT Austria - https://www.cert.at/
// Eine Initiative der nic.at GmbH - https://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cert.at/pipermail/intelmq-users/attachments/20180605/e987d263/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.cert.at/pipermail/intelmq-users/attachments/20180605/e987d263/attachment.sig>