MISP_2_1

Request Type

Analyzer

Work Environment

Description

Error when I use the MISP Analyzer:
CRITICAL [create_misp_object.py:24 - <module>() ] You need lief >= 0.11.0. The quick and dirty fix is: pip3 install --force pymisp[fileobjects]Traceback (most recent call last): File "/opt/Cortex-Analyzers/analyzers/MISP/misp.py", line 80, in <module> MISPAnalyzer().run() File "/opt/Cortex-Analyzers/analyzers/MISP/misp.py", line 29, in __init__ proxies={'http': self.http_proxy, 'https': self.https_proxy}) File "/opt/Cortex-Analyzers/analyzers/MISP/mispclient.py", line 62, in __init__ proxies=proxies)) File "/usr/local/lib/python3.6/dist-packages/pymisp/api.py", line 142, in __init__ if brotli_supported(): File "/usr/local/lib/python3.6/dist-packages/pymisp/api.py", line 97, in brotli_supported major, minor, patch = urllib3.__version__.split('.') # noqa: F811ValueError: not enough values to unpack (expected 3, got 2)

pymisp is installed and working on the MISP server.
Where to look?

P.S: VirusTotal and IpInfo are working fine.

Regards,
Khalid.

Start with the traceback and inspect analyzers/MISP/misp.py and analyzers/MISP/mispclient.py, especially the pymisp initialization and the urllib3 version check shown in the error. Reproduce the analyzer startup in the reported environment and determine the compatible dependency versions; done means the MISP analyzer starts without the ValueError.