MISP
/
PyMISP
mirror of https://github.com/MISP/PyMISP
2
0
Fork 0
Code Issues Releases Wiki Activity

Properly split ip:port for ipv4 (openioc import)

pull/55/head
Raphaël Vinot 2017-02-27 18:38:52 +01:00
parent be0c8a1f8c
commit c348fcc7dc
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
pymisp/tools/openioc.py
View File

@ -147,5 +147,9 @@ def set_all_attributes(openioc, misp_event):
comment = extract_field(item, 'Comment')
if comment:
attribute_values["comment"] = '{} {}'.format(attribute_values["comment"], comment)
if mapping['type'] in ['ip-src', 'ip-dst'] and value.count(':') == 1:
attribute_values['type'] = mapping['type'] + '|port'
attribute_values['value'] = attribute_values['value'].replace(':', '|')
misp_event.add_attribute(**attribute_values)
return misp_event