Project

General

Profile

Bug #148

Prewikka 0.9.4 crashes when the 'Filter on Target' option is used

Added by about 13 years ago. Updated about 10 years ago.

Status:
Closed
Priority:
Normal
Target version:
Start date:
Due date:
% Done:

0%

Resolution:
fixed

Description

In the eventlisting, clicking on an IP address and selecting 'Filter on this Target' will result in a crash (see backtrace below).

The crash is caused by the fact that in the created filter string alert.target.node.address is used instead of alert.target.node.address.address.

The attached patch fixes this.

Backtrace:

Traceback (most recent call last):
  File "/usr/lib/python2.3/site-packages/prewikka/Core.py", line 306, in process
    getattr(view[[object"] view["handler]])()
  File "/usr/lib/python2.3/site-packages/prewikka/views/messagelisting.py", line 1242, in render
    total = self._setMessages(criteria)
  File "/usr/lib/python2.3/site-packages/prewikka/views/messagelisting.py", line 1183, in _setMessages
    return self._setAggregatedMessagesNoValues(criteria, aggregated_on)
  File "/usr/lib/python2.3/site-packages/prewikka/views/messagelisting.py", line 956, in _setAggregatedMessagesNoValues
    results2 = self.env.idmef_db.getValues(selection, criteria + [[alertcorrelation_alertname]])
  File "/usr/lib/python2.3/site-packages/prewikka/IDMEFDatabase.py", line 342, in getValues
    criteria = idmef_criteria_new_from_string(criteria)
[[PreludeError]]: Object type 'class' does not support operator '<>*'

prewikka-filter-target.patch View (694 Bytes) admin admin, 04/20/2006 11:37 AM

History

#1 Updated by Yoann VANDOORSELAERE about 13 years ago

  • Status changed from New to Assigned

#2 Updated by Yoann VANDOORSELAERE about 13 years ago

  • Status changed from Assigned to Closed
  • Resolution set to fixed

(In r8164) Include patch from Gijs Hollestelle: fix 'Filter on Target' link (fix #148).

#3 Updated by Yoann VANDOORSELAERE about 10 years ago

  • Project changed from PRELUDE SIEM to Prewikka
  • Category deleted (5)
  • Target version deleted (0.9.5)

Also available in: Atom PDF