Error: Could not add event '0' from feed XX - incompatible manifest.json file?
@iglocska is already working on this.
Since Jan 2, 2020.
- Dominant language
- Python
- Stars
- 491
- Forks
- 290
- Avg merge
- 2d 8h
- Merged PRs (30d)
- 3
Description
We are successfully generating our feeds using feed-generate.py but when we add them to a different MISP instance, the following message is presented on debug logs:
==> error.log <==
2019-12-30 17:46:11 Error: Could not add event '0' from feed XX.
[InvalidArgumentException] Given event UUID '0' is invalid.
Stack Trace:
#0 /var/www/MISP/app/Model/Feed.php(710): Feed->downloadAndParseEventFromFeed(Array, 0, Object(HttpSo
cket))
#1 /var/www/MISP/app/Model/Feed.php(412): Feed->__addEventFromFeed(Object(HttpSocket), Array, 0, Arra
y, Array)
#2 /var/www/MISP/app/Model/Feed.php(787): Feed->downloadFromFeed(Array, Array, Object(HttpSocket), Ar
ray, '59652')
#3 /var/www/MISP/app/Console/Command/ServerShell.php(196): Feed->downloadFromFeedInitiator('69', Arra
y, '59652')
#4 /var/www/MISP/app/Console/Command/AppShell.php(32): ServerShell->fetchFeed()
#5 /var/www/MISP/app/Vendor/kamisama/php-resque-ex/lib/Resque/Job.php(199): AppShell->perform()
#6 /var/www/MISP/app/Vendor/kamisama/php-resque-ex/lib/Resque/Worker.php(278): Resque_Job->perform()
#7 /var/www/MISP/app/Vendor/kamisama/php-resque-ex/lib/Resque/Worker.php(241): Resque_Worker->perform(Object(Resque_Job))
#8 /var/www/MISP/app/Vendor/kamisama/php-resque-ex/bin/resque(109): Resque_Worker->work('5')
#9 /var/www/MISP/app/Vendor/kamisama/php-resque-ex/bin/resque(100): startWorker('default', 1, Object(MonologInit\MonologInit), '5')
#10 {main}
The only file downloaded is the manifest.json and its JSON structure is correct. I can't see in it any UUID as '0', our org UUID is correct.
Could this be that the manifest.json file generated by feed-generate.py is incompatible with the latest version of MISP?
Snippet of a generated manifest.json file:
[{
"5e04405b-20f4-4f12-a6ba-0af3ac110002": {
"Orgc": {
"uuid": "5df12de7-b018-4f25-ac49-04bdac110002",
"name": "My ORG"
},
"Tag": [{
"name": "dga",
"colour": "#fbff30"
}, {
"name": "tlp:amber",
"colour": "#FFC000"
}, {
"name": "admiralty-scale:source-reliability=\"b\"",
"colour": "#075200"
}, {
"name": "admiralty-scale:information-credibility=\"1\"",
"colour": "#0eb100"
}, {
"name": "misp-galaxy:botnet=\"Bamital\"",
"colour": "#0088cc"
}],
"info": "Active DGA for Bamital",
"date": "2019-12-26",
"analysis": 1,
"threat_level_id": 1,
"timestamp": 1577336925
},
"5e04405d-af64-4215-828c-0af3ac110002": {
"Orgc": {
"uuid": "5df12de7-b018-4f25-ac49-04bdac110002",
"name": "My ORG"
},
"Tag": [{
"name": "dga",
"colour": "#fbff30"
}, {
"name": "tlp:amber",
"colour": "#FFC000"
}, {
"name": "admiralty-scale:source-reliability=\"b\"",
"colour": "#075200"
}, {
"name": "admiralty-scale:information-credibility=\"1\"",
"colour": "#0eb100"
}, {
"name": "misp-galaxy:botnet=\"Bamital\"",
"colour": "#0088cc"
}],
"info": "Active DGA for Bamital",
"date": "2019-12-25",
"analysis": 1,
"threat_level_id": 1,
"timestamp": 1577336927
},
"5e044060-5090-48af-a0d7-0af3ac110002": {
"Orgc": {
"uuid": "5df12de7-b018-4f25-ac49-04bdac110002",
"name": "My ORG"
},
"Tag": [{
"name": "dga",
"colour": "#fbff30"
}, {
"name": "tlp:amber",
"colour": "#FFC000"
}, {
"name": "admiralty-scale:source-reliability=\"b\"",
"colour": "#075200"
}, {
"name": "admiralty-scale:information-credibility=\"1\"",
"colour": "#0eb100"
}, {
"name": "misp-galaxy:botnet=\"Bamital\"",
"colour": "#0088cc"
}],
"info": "Active DGA for Bamital",
"date": "2019-12-26",
"analysis": 1,
"threat_level_id": 1,
"timestamp": 1577336930
},
"5e044062-b804-4ac4-9df4-0eb6ac110002": {
"Orgc": {
"uuid": "5df12de7-b018-4f25-ac49-04bdac110002",
"name": "My ORG"
},
"Tag": [{
"name": "dga",
"colour": "#fbff30"
}, {
"name": "tlp:amber",
"colour": "#FFC000"
}, {
"name": "admiralty-scale:source-reliability=\"b\"",
"colour": "#075200"
}, {
"name": "admiralty-scale:information-credibility=\"1\"",
"colour": "#0eb100"
}, {
"name": "misp-galaxy:botnet=\"Bamital\"",
"colour": "#0088cc"
}],
"info": "Active DGA for Bamital",
"date": "2019-12-27",
"analysis": 1,
"threat_level_id": 1,
"timestamp": 1577336932
}
}]
Thank you!
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.