[Threat Bus] Error when launching the connector

[annoyingapt]

Description

I'm new to OpenCTI and ThreatBus, so this could be user error. The OpenCTI ThreatBus Connector container dies after starting with a pluggy error. Let me know if there is any further info you need.

Environment

1. OS (where OpenCTI server runs): Portainer stack
2. OpenCTI version: OpenCTI 5.2.4
3. Threatbus Connector version: 5.2.4

Threatbus Connector

connector-threatbus: image: opencti/connector-threatbus:5.2.4 environment: - OPENCTI_URL=${OPENCTI_GUI_URL} - OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN} - CONNECTOR_ID=${CONNECTOR_THREATBUS} - CONNECTOR_TYPE=STREAM - CONNECTOR_NAME=Threat Bus - CONNECTOR_SCOPE=threatbus - CONNECTOR_LIVE_STREAM_ID=live # ID of the live stream created in the OpenCTI UI - CONNECTOR_LIVE_STREAM_LISTEN_DELETE=true - CONNECTOR_CONFIDENCE_LEVEL=15 # From 0 (Unknown) to 100 (Fully trusted) - CONNECTOR_LOG_LEVEL=debug - CONNECTOR_ENTITY_NAME=Test - CONNECTOR_ENTITY_DESCRIPTION=Test - THREATBUS_ZMQ_HOST=${THREATBUS_ZMQ_HOST} - THREATBUS_ZMQ_PORT=${THREATBUS_ZMQ_PORT} restart: always depends_on: - opencti

Reproducible Steps

Steps to create the smallest reproducible scenario:

1. Add connector to OpenCTI stack
2. Container stops after starting

Output

Traceback (most recent call last): File "/opt/opencti-connector-threatbus/connector.py", line 7, in from threatbus.data import Operation, ThreatBusSTIX2Constants File "/usr/local/lib/python3.9/site-packages/threatbus/init.py", line 2, in from .threatbus import ThreatBus, start File "/usr/local/lib/python3.9/site-packages/threatbus/threatbus.py", line 15, in class ThreatBus(stoppable_worker.StoppableWorker): File "/usr/local/lib/python3.9/site-packages/threatbus/threatbus.py", line 18, in ThreatBus backbones: pluggy.hooks._HookRelay, AttributeError: module 'pluggy' has no attribute 'hooks'

[bakhtawarw]

Hi @annoyingapt , Can you please help me with threatbus? I am new to it. Thankyou

[annoyingapt]

I'm not really using it, I just found this bug when exploring opencti connectors. But to be honest it wasn't too bad to setup if I remember.

[bakhtawarw]

How did you setup broker for threatbus-zeek plugin? I'm facing multiple errors.

[SamuelHassine]

@helene-nguyen @Megafredo: Threat Bus is not updated since 3 years, nobody is maintaining this. can you please:

1. Remove the folder from the repository
2. Remove from CI/CD
3. Remove from the Notion OpenCTI ecosystem
4. Close this issue as solved