search

NCSC-NL / taranis3

Taranis
Other
59 stars 17 forks source link

Can't Import CPE list #53

Open RochdiMrayhi opened 2 years ago

RochdiMrayhi commented 2 years ago

I can't import CPE list I tried with direct URL to the list but I coudn't import it from Nist website I tried also to download the CPE file and extract it on the local server but it does not work also

markov2 commented 2 years ago

Can you please be more specific:

  1. what kind of error message did you see on the screen.
  2. What message did you find in the log-files.
  3. Which version of Taranis are you running?
  4. Is your Taranis a brand new installation, or an upgrade?
  5. Have you installed CPEs before on this instance?
  6. Which CPE list file are you trying to import?
RochdiMrayhi commented 2 years ago

taranis-cpe You can find the error message here, it tries to process the XML file import but it does not finish this is a fresh installation of Taranis version 3.7.5 I can add manually but I can't import XML file (I tried with both ghraphical interface and commands) I tried to search for logs but I don't know to look exactly, all the log files I consulted much information

markov2 commented 2 years ago

You didn't get more info during the CLI import either? (6) which file did you try (I can try it in my own environment)

(The client-side) Ajax errors mean: serious crash on the server side. You can find the error in file /tmp/taranis.errors On distibutions where systemd puts apache in a chroot prepend /tmp/systemd*apache2*

markov2 commented 2 years ago

It's a pity that you could to find the error message. But I may have been able to solve the issue anyway.

Apparently, NIST has changed it website a bit. The CPE's are downloaded in ~taranis/taranis-3.7.5/perl5/Taranis/Command/CPE.pm. On line 20, it defines the base location in NIST as static.nvd.nist.gov. Please remove static. and try to import it again.

We do create all CPE's by hand: the standard list is too detailed for our use.