cuckoosandbox / cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system
http://www.cuckoosandbox.org
Other
5.57k stars 1.71k forks source link

After upgrade to 2.0.2 same @1480 problem #1487

Closed Maurotb closed 7 years ago

Maurotb commented 7 years ago

Notification is not the last module launched

2017-04-26 09:31:42,711 [cuckoo.core.startup] DEBUG: Imported "reporting" modules: 2017-04-26 09:31:42,711 [cuckoo.core.startup] DEBUG: |-- ElasticSearch 2017-04-26 09:31:42,711 [cuckoo.core.startup] DEBUG: |-- Feedback 2017-04-26 09:31:42,711 [cuckoo.core.startup] DEBUG: |-- JsonDump 2017-04-26 09:31:42,711 [cuckoo.core.startup] DEBUG: |-- Mattermost 2017-04-26 09:31:42,711 [cuckoo.core.startup] DEBUG: |-- MISP 2017-04-26 09:31:42,712 [cuckoo.core.startup] DEBUG: |-- Moloch 2017-04-26 09:31:42,712 [cuckoo.core.startup] DEBUG: |-- MongoDB 2017-04-26 09:31:42,712 [cuckoo.core.startup] DEBUG: |-- Notification 2017-04-26 09:31:42,712 [cuckoo.core.startup] DEBUG: `-- SingleFile

In notification.py i see patch but not work

class Notification(Report): """Notifies external service about finished analysis via URL.""" order = 3

jbremer commented 7 years ago

Well, that's imported modules, those are sorted alphabetically ;-) If I (re)process an analysis with JSON, MongoDB, SinglePage, and Notification enabled I get the following.

2017-04-26 11:21:04,124 [cuckoo.core.plugins] DEBUG: Executed reporting module "JsonDump"
2017-04-26 11:21:05,116 [cuckoo.core.plugins] DEBUG: Executed reporting module "SingleFile"
2017-04-26 11:21:05,189 [cuckoo.core.plugins] DEBUG: Executed reporting module "MongoDB"
2017-04-26 11:21:05,190 [cuckoo.core.plugins] WARNING: The reporting module "Notification" returned the following error: Failed posting message via Notification: Invalid URL 'None': No schema supplied. Perhaps you meant http://None?

Now I didn't configure notification, but the order is correct :-) Please acknowledge.

Maurotb commented 7 years ago

Yes! you are right!

jbremer commented 7 years ago

Thanks - closing as resolved. Thanks again for the feedback!