prelude-correlator/master: Fix exception in case of unsupported address format

[email protected] Wed, 23 Dec 2009 09:57:09 +0100 (CET)
Newsgroups gmane.comp.security.ids.prelude.cvs
Message-ID <[email protected]>
commit de58c2c83efb4c5339e172ec6f928004770bbcad
Author: Yoann Vandoorselaere <[email protected]>
Date:   Wed Dec 23 10:00:12 2009 +0100

    Fix exception in case of unsupported address format


========================================

 PreludeCorrelator/plugins/spamhausdrop.py |    7 ++++++-
 1 files changed, 6 insertions(+), 1 deletions(-)

========================================

diff --git a/PreludeCorrelator/plugins/spamhausdrop.py b/PreludeCorrelator/plugins/spamhausdrop.py
index 57111ea..63c028b 100644
--- a/PreludeCorrelator/plugins/spamhausdrop.py
+++ b/PreludeCorrelator/plugins/spamhausdrop.py
@@ -107,7 +107,12 @@ class SpamhausDropPlugin(Plugin):
 
     def run(self, idmef):
         for source in idmef.Get("alert.source(*).node.address(*).address"):
-            if IPAddress(source) in self.__mynets:
+            try:
+                addr = IPAddress(source)
+            except:
+                continue
+
+            if addr in self.__mynets:
                 ca = Context("SPAMHAUS_" + source, { "expire": 300, "alert_on_expire": True }, update = True, idmef = idmef)
                 if ca.getUpdateCount() == 0:
                         ca.Set("alert.classification.text", "IP source matching Spamhaus DROP dataset")
_______________________________________________
Prelude-cvslog site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-cvslog