[Prelude Hybrid IDS] #208: Prewikka crashes when reading correlator alerts
"Prelude Hybrid IDS" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#208: Prewikka crashes when reading correlator alerts
----------------------+-----------------------------------------------------
Reporter: toady | Owner: yoann
Type: defect | Status: new
Priority: normal | Milestone:
Component: prewikka | Version: devel
Severity: critical | Keywords:
----------------------+-----------------------------------------------------
How to reproduce the bug:
In Prewikka, when my server is subject to bruteforce attacks, it does ssh
logins failures and prelude-correlator make a high risk assessment titled
"Brute Force Attack". However when I want details and click on the alert,
I get Prewikka crashing.
What the error is:
object does not support item assignment
{{{
Traceback (most recent call last):
File "/usr/lib/python2.4/site-packages/prewikka/Core.py", line 307, in
process
getattr(view_object, view["handler"])()
File "/usr/lib/python2.4/site-packages/prewikka/views/alertlisting.py",
line 1075, in render
total = self._setMessages(criteria)
File "/usr/lib/python2.4/site-packages/prewikka/views/alertlisting.py",
line 1033, in _setMessages
dataset = self._setMessage(message, ident)
File "/usr/lib/python2.4/site-packages/prewikka/views/alertlisting.py",
line 673, in _setMessage
msg.setMessage(message, ident)
File "/usr/lib/python2.4/site-packages/prewikka/views/alertlisting.py",
line 615, in setMessage
self.setMessageInfo(message, ident)
File "/usr/lib/python2.4/site-packages/prewikka/views/alertlisting.py",
line 582, in setMessageInfo
self.setMessageCorrelationAlertInfo(message, ident)
File "/usr/lib/python2.4/site-packages/prewikka/views/alertlisting.py",
line 566, in setMessageCorrelationAlertInfo
ca_params["timeline_unit"] = "unlimited"
TypeError: object does not support item assignment
}}}
--
Ticket URL: <https://trac.prelude-ids.org/ticket/208>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite
_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel