search

alphasoc / nfr

A lightweight tool to score network traffic and flag anomalies
https://alphasoc.com
Other
122 stars 19 forks source link

Behaviour of listen command #5

Closed phob0s-pl closed 7 years ago

phob0s-pl commented 7 years ago

When API key is set but not registered: a) send queries to AlphaSoc b) exit c) any other idea?

chrisforce1 commented 7 years ago

@tg I thought the API returned an error with a message right? e.g. product not activated..

phob0s-pl commented 7 years ago

API states: One has to register the account in order to get a full system functionality.

ioj commented 7 years ago

As we discussed it today -- the app should be able to upload DNS data when the key is valid, but not registered. Error messages from /v1/account/status or /v1/events should be logged to syslog.

As a sidenote: API key registration flow is a bit different than in DNS Analytics. As both stages (key request and account registration) happen one after another during the same --register process, the user should be able to resume the process if unforeseen errors happen (i.e. the app should detect if the key was already requested and use the saved key for registration instead of requesting a new key, etc.)

phob0s-pl commented 7 years ago

Before calling /v1/events I am checking /v1/account/status. Queries are sent always.