Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Error Checking: Validate logtype arguments #4

Open
drewsortega opened this issue Jun 10, 2021 · 0 comments
Open

Error Checking: Validate logtype arguments #4

drewsortega opened this issue Jun 10, 2021 · 0 comments
Labels
bug Something isn't working

Comments

@drewsortega
Copy link
Contributor

When the user provides log type, for example 'rdp', 'dns', etc, there is currently no error checking. Nagini just looks for files starting with this log type and if its not a real log type then it will not fail, and just say it finds no longs.

Instead, there should be error checking before starting. Some requirements:

  • When log_type provided, remove all capitalization. For example, RDP -> rdp, DNS -> dns.
  • Check if valid log_type. Since Zeek deployments can vary with valid log types, the best thing to do would be to do a directory list and compile a list of found log types, then compare to the input.
@drewsortega drewsortega added the bug Something isn't working label Jun 10, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant