OpenCTI-Platform / connectors

OpenCTI Connectors
https://www.opencti.io
Apache License 2.0
374 stars 407 forks source link

[Cryptolaemus] connector ERROR:root:Missing parameters: id or filters #81

Closed MathRig closed 4 years ago

MathRig commented 4 years ago

Hi,

I tried to add Cryptolaemus connector to our opencti plateform. It's not working and it has this error: ERROR:root:Missing parameters: id or filters here are the output when I launch the cryptoleamus.py


INFO:root:Listing Stix-Domain-Entities with filters [{"key": "name", "values": ["Cryptolaemus Team"]}].
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): [IPOFMYOPENCTISERVER]
INFO:root:Listing External-Reference with filters [{"key": "url", "values": ["https://paste.cryptolaemus.com/emotet/2020/04/07/emotet-c2-rsa-update-04-07-20-1"]}].
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): [IPOFMYOPENCTISERVER]
INFO:root:Listing Stix-Domain-Entities with filters [{"key": "name", "values": ["Emotet"]}].
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): [IPOFMYOPENCTISERVER]
ERROR:root:Missing parameters: id or filters
INFO:root:Listing Indicators with filters [{"key": "indicator_pattern", "values": ["[ipv4-addr:value = '201.213.100.141']"], "operator": "match"}].
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): [IPOFMYOPENCTISERVER]
INFO:root:Reading Stix-Entity {6378e84b-b6b8-4873-9cee-a8705a57fd91}.
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): [IPOFMYOPENCTISERVER]
INFO:root:Reading Stix-Entity {f5c274b0-476a-42d8-94ed-a7fa12cf6b93}.
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): [IPOFMYOPENCTISERVER]
INFO:root:Listing stix_relations with {type: indicates, from_id: f5c274b0-476a-42d8-94ed-a7fa12cf6b93, to_id: 507d8a42-3395-4fef-904e-0c612854b933}
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): [IPOFMYOPENCTISERVER]
INFO:root:Reading Stix-Entity {964bad3e-ea8e-4100-aafc-6d22ea55b7fa}.
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): [IPOFMYOPENCTISERVER]
ERROR:root:Missing parameters: id or filters
INFO:root:Listing Indicators with filters [{"key": "indicator_pattern", "values": ["[ipv4-addr:value = '189.160.234.67']"], "operator": "match"}].
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): [IPOFMYOPENCTISERVER]
INFO:root:Reading Stix-Entity {654f842d-61a8-4705-9f77-06b6524d4f66}.
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): [IPOFMYOPENCTISERVER]
INFO:root:Reading Stix-Entity {375b980f-6bb4-45d1-ba29-bc2e3fbae0a4}.
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): [IPOFMYOPENCTISERVER]
INFO:root:Listing stix_relations with {type: indicates, from_id: 375b980f-6bb4-45d1-ba29-bc2e3fbae0a4, to_id: 507d8a42-3395-4fef-904e-0c612854b933}
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): [IPOFMYOPENCTISERVER]
INFO:root:Reading Stix-Entity {e9cccf05-c0a7-48ae-89a9-f9ed84b90d4d}.
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): [IPOFMYOPENCTISERVER]
ERROR:root:Missing parameters: id or filters
INFO:root:Listing Indicators with filters [{"key": "indicator_pattern", "values": ["[ipv4-addr:value = '103.31.232.93']"], "operator": "match"}].
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): [IPOFMYOPENCTISERVER]
INFO:root:Reading Stix-Entity {db7cf13c-b898-4381-9f86-014d70324a7c}.
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): [IPOFMYOPENCTISERVER]
INFO:root:Reading Stix-Entity {0c2f0b59-eea6-44ad-8266-9f99ba4ba579}.
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): [IPOFMYOPENCTISERVER]
INFO:root:Listing stix_relations with {type: indicates, from_id: 0c2f0b59-eea6-44ad-8266-9f99ba4ba579, to_id: 507d8a42-3395-4fef-904e-0c612854b933}
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): [IPOFMYOPENCTISERVER]
^CINFO:root:Connector stop```

Any ideas of what this error means ? 
SamuelHassine commented 4 years ago

@amr-cossi (JPSalles), any idea?

JPSALLES commented 4 years ago

I really don't know... It works fine on demo.opencti.io for me.

INFO:root:Listing Threat-Actors with filters null. INFO:root:Starting ping alive thread INFO:root:Fetching Cryptolaemus Emotet's datasets... INFO:root:Connector has never run INFO:root:Connector will run! INFO:root:Listing Stix-Domain-Entities with filters [{"key": "name", "values": ["Cryptolaemus Team"]}]. INFO:root:Listing External-Reference with filters [{"key": "url", "values": ["https://paste.cryptolaemus.com/emotet/2020/04/13/emotet-c2-rsa-update-04-13-20-1"]}]. INFO:root:Listing Stix-Domain-Entities with filters [{"key": "name", "values": ["Emotet"]}]. INFO:root:Listing Indicators with filters [{"key": "indicator_pattern", "values": ["[ipv4-addr:value = '152.170.196.157']"], "operator": "eq"}]. INFO:root:Reading Stix-Entity {d4fab770-663f-4cd9-a61a-934c3048fe6e}. INFO:root:Reading Stix-Entity {c0573e61-d8c7-4e60-8e4d-9d866cf272b5}. INFO:root:Listing stix_relations with {type: indicates, from_id: c0573e61-d8c7-4e60-8e4d-9d866cf272b5, to_id: 09bc17da-4972-423d-869a-b7d3e82e0128}

SamuelHassine commented 4 years ago

@MathRig please can you tell me which Pycti version are you using pip3 show pycti ?

MathRig commented 4 years ago

Hi,

Here the output:

$ pip3 show pycti Name: pycti Version: 3.0.3 Summary: Python API client for OpenCTI. Home-page: https://github.com/OpenCTI-Platform/client-python Author: OpenCTI Author-email: contact@opencti.io License: Apache Location: /usr/local/lib/python3.6/site-packages Requires: requests, PyYAML, python-dateutil, datefinder, stix2, stix2-validator, pytz, pika, deprecated, python-magic Required-by:

JPSALLES commented 4 years ago

I think it is the problem here. My pycti version is 3.1.0.

SamuelHassine commented 4 years ago

The last version is 3.2.0 with OpenCTI platform 3.2.0 released today. I advise you to upgrade all and re-try.