diff options
author | Ashlee Young <ashlee@wildernessvoice.com> | 2016-01-20 01:10:01 +0000 |
---|---|---|
committer | Ashlee Young <ashlee@wildernessvoice.com> | 2016-01-20 01:10:11 +0000 |
commit | 19d701ddf07d855128ded0cf2b573ce468e3bdd6 (patch) | |
tree | 0edcd3461ca903c76e431bb7c6348c42a0f12488 /framework/src/suricata/contrib/file_processor/Processor/ShadowServer.pm | |
parent | fac6fbefbfad1cf837ddd88bc0d330559c8eb6f9 (diff) |
Removing Suricata and Audit from source repo, and updated build.sh to avoid building suricata. Will re-address this in C release via tar balls.
Change-Id: I3710076f8b7f3313cb3cb5260c4eb0a6834d4f6e
Signed-off-by: Ashlee Young <ashlee@wildernessvoice.com>
Diffstat (limited to 'framework/src/suricata/contrib/file_processor/Processor/ShadowServer.pm')
-rw-r--r-- | framework/src/suricata/contrib/file_processor/Processor/ShadowServer.pm | 49 |
1 files changed, 0 insertions, 49 deletions
diff --git a/framework/src/suricata/contrib/file_processor/Processor/ShadowServer.pm b/framework/src/suricata/contrib/file_processor/Processor/ShadowServer.pm deleted file mode 100644 index c9c7a5f9..00000000 --- a/framework/src/suricata/contrib/file_processor/Processor/ShadowServer.pm +++ /dev/null @@ -1,49 +0,0 @@ -package Processor::ShadowServer; -use Moose; -extends 'Processor'; -use Data::Dumper; -use LWP::UserAgent; -use JSON; - -has 'md5' => (is => 'ro', isa => 'Str', required => 1); -has 'ua' => (is => 'rw', isa => 'LWP::UserAgent', required => 1, default => sub { return LWP::UserAgent->new(agent => 'Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:10.0.1) Gecko/20100101 Firefox/10.0.1'); }); -has 'url_template' => (is => 'ro', isa => 'Str', required => 1, default => 'http://innocuous.shadowserver.org/api/?query=%s'); -sub name { 'ShadowServer' } -sub description { 'Processor for shadowserver.com' } - -sub process { - my $self = shift; - my $url = sprintf($self->url_template, $self->md5); - $self->log->debug('Getting url ' . $url); - my $response = $self->ua->get($url); - if ($response->code eq 200){ - if ($response->decoded_content =~ /No match/){ - $self->log->debug('No result'); - return 0; - } - elsif ($response->decoded_content =~ /Whitelisted/){ - $self->log->info('Whitelisted'); - return 0; - } - $self->log->info('Got shadowserver.com result'); - my $ret; - eval { - my ($meta,$json) = split(/\n/, $response->decoded_content); - my @meta_cols = qw(md5 sha1 first_date last_date type ssdeep); - my %metas; - @metas{@meta_cols} = split(/\,/, $meta); - $ret = { meta => \%metas, results => decode_json($json) }; - }; - if ($@){ - $self->log->error($@); - return 0; - } - return $ret; - } - else { - $self->log->debug('Communications failure: ' . Dumper($response)); - return 0; - } -} - -1 |