Skip to content

Commit 2d52673

Browse files
author
Sebastian Wagner
committed
BUG: ctip parser:
- Fix mapping of `DestinationIpInfo.DestinationIpConnectionType` field (contained a typo). - Explicitly ignore field `DestinationIpInfo.DestinationIpv4Int` as the data is already in another field.
1 parent cae9f49 commit 2d52673

File tree

2 files changed

+5
-1
lines changed

2 files changed

+5
-1
lines changed

CHANGELOG.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,9 @@ CHANGELOG
1717

1818
#### Parsers
1919
- `intelmq.bots.parsers.cymru.parser_cap_program`: Add support for protocols 47 (GRE) and 59 (IPv6-NoNxt).
20+
- `intelmq.bots.parsers.microsoft.parser_ctip`:
21+
- Fix mapping of `DestinationIpInfo.DestinationIpConnectionType` field (contained a typo).
22+
- Explicitly ignore field `DestinationIpInfo.DestinationIpv4Int` as the data is already in another field.
2023

2124
#### Experts
2225

intelmq/bots/parsers/microsoft/parser_ctip.py

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -101,7 +101,8 @@
101101
"DestinationIpInfo.DestinationIpLongitude": "destination.geolocation.longitude",
102102
"DestinationIpInfo.DestinationIpMetroCode": "extra.destination.geolocation.metro_code",
103103
"DestinationIpInfo.DestinationIpAreaCode": "extra.destination.geolocation.area_code",
104-
"DestinationIpInfo.DestnationIpConnectionType": "protocol.application",
104+
"DestinationIpInfo.DestinationIpConnectionType": "protocol.application",
105+
"DestinationIpInfo.DestinationIpv4Int": "__IGNORE__",
105106
"DestinationPort": "destination.port",
106107
"TargetIp": "__IGNORE__",
107108
"TargetPort": "__IGNORE__",

0 commit comments

Comments
 (0)