StamusNetworks / scirius

Scirius is a web application for Suricata ruleset management and threat hunting.
GNU General Public License v3.0
626 stars 150 forks source link

Django server crashes during URL HTTP tar Source Add #131

Open acalabrigo opened 6 years ago

acalabrigo commented 6 years ago

When I try to add a tar compressed source from an HTTP URL, the Django server suffers internal errors and goes down briefly before recovering. Has anyone else observed this behavior? The source does successfully add after the recovery.

Here's the log output while adding the emerging threats source from the README:

[28/Feb/2018 20:36:17] "POST /rules/source/add HTTP/1.1" 200 24753
[28/Feb/2018 20:36:19] "GET /rules/info?query=disk HTTP/1.1" 200 45
[28/Feb/2018 20:36:19] "GET /rules/info?query=memory HTTP/1.1" 200 116
[28/Feb/2018 20:36:19] "GET /rules/es?query=health HTTP/1.1" 200 412
[28/Feb/2018 20:36:19] "GET /rules/info?query=status HTTP/1.1" 200 17
[28/Feb/2018 20:36:54] "GET /rules/info?query=disk HTTP/1.1" 500 14999
[28/Feb/2018 20:36:54] "GET /rules/info?query=status HTTP/1.1" 500 15005
[28/Feb/2018 20:36:54] "GET /rules/es?query=health HTTP/1.1" 500 14997
[28/Feb/2018 20:36:54] "GET /rules/info?query=memory HTTP/1.1" 500 15005
[28/Feb/2018 20:37:01] "GET /rules/info HTTP/1.1" 500 14974
[28/Feb/2018 20:37:01] "GET /rules/info HTTP/1.1" 500 14974
[28/Feb/2018 20:37:01] "GET /rules/info HTTP/1.1" 500 14974
[28/Feb/2018 20:37:01] "GET /rules/info HTTP/1.1" 500 14974
[28/Feb/2018 20:37:04] "POST /rules/source/3/update HTTP/1.1" 200 34
[28/Feb/2018 20:37:05] "GET /rules/info HTTP/1.1" 200 19
[28/Feb/2018 20:37:06] "GET /rules/info?query=disk HTTP/1.1" 200 45
[28/Feb/2018 20:37:06] "GET /rules/info?query=memory HTTP/1.1" 200 116
[28/Feb/2018 20:37:06] "GET /rules/es?query=health HTTP/1.1" 200 412
[28/Feb/2018 20:37:06] "GET /rules/info?query=status HTTP/1.1" 200 17
pevma commented 6 years ago

Is this the latest git? Does it happen every time you add/remove source?

acalabrigo commented 6 years ago

This is version 1.2.8, and it happens every time I add a tar source from URL.

pevma commented 6 years ago

Is it possible to try the latest git ? (there were a bunch of upgrades)