Project

General

Profile

Actions

Bug #6449

open

Updating StamusOpenNRD error

Added by Samiux A 6 months ago. Updated 23 days ago.

Status:
Feedback
Priority:
Normal
Assignee:
-
Target version:
-
Affected Versions:
Effort:
Difficulty:
Label:

Description

I just registered to Stamus OpenNRD feed and follow the following steps to install and update. However, it produces error.

Modify drop.conf :

sudo nano /etc/suricata/drop.conf

re:SN\sNRD

Installation and update :

sudo suricata-update add-source StamusOpenNRD-Domains-30Day https://ti.stamus-networks.io/SECRETCODEHERE/sti-domains-nrd-30.tar.gz

sudo suricata-update add-source StamusOpenNRD-Entropy-30Day https://ti.stamus-networks.io/SECRETCODEHERE/sti-domains-entropy-30.tar.gz

sudo suricata-update add-source StamusOpenNRD-Domains-Phishing-30Day https://ti.stamus-networks.io/SECRETCODEHERE/sti-domains-phishing-30.tar.gz

sudo suricata-update enable-source et/open

sudo suricata-update update-sources

sudo suricata-update

The error message :

8/11/2023 -- 23:04:09 - <Info> -- Writing rules to /var/lib/suricata/rules/suricata.rules: total: 45873; enabled: 34658; added: 0; removed 0; modified: 9
Traceback (most recent call last):
File "/usr/bin/suricata-update", line 36, in <module>
sys.exit(main.main())
^^^^^^^^^
File "/usr/lib/suricata/python/suricata/update/main.py", line 1384, in main
sys.exit(_main())
^^^^^
File "/usr/lib/suricata/python/suricata/update/main.py", line 1320, in _main
write_merged(os.path.join(output_filename), rulemap, dep_files)
File "/usr/lib/suricata/python/suricata/update/main.py", line 542, in write_merged
reformatted = handle_dataset_files(rule, dep_files)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/suricata/python/suricata/update/main.py", line 446, in handle_dataset_files
prefix = os.path.dirname(rule.group)
^^^^^^^^^^^^^^^^^^^^^^^^^
File "<frozen posixpath>", line 152, in dirname
TypeError: expected str, bytes or os.PathLike object, not NoneType {"message": "done", "return": "OK"}

Actions #1

Updated by Jason Ish 23 days ago

  • Status changed from New to Feedback

Is this still an issue? I'm using the following rulesets with Suricata-Update as bundled with Suricata 7.0.4 without issue:

  - stamus/nrd-30-open
  - stamus/nrd-entropy-30-open
  - stamus/nrd-phishing-30-open

Actions

Also available in: Atom PDF