Deleted user

Message dumping is slow for big files

1

Currently all the dump files are valid JSON files, which means that for every message to be dumped, this happens: * Read and parse the full dump-file * Append the...

https://github.com/x0rz/phishing_catcher Could be used to filter on domain similarities as expert bot

If you write: ```sieve if source.asn == '64496' ``` it will never match. You need to write: ```sieve if source.asn == 64496 ``` as `"64496" == 64496)` equals to false...

Cymru CAP Parser: malware http_post

1

One more thing, the line: ``` controller|x.x.x.x|12525|2021-03-11 00:02:14|family: http_post;hostname: domain.lv;;port: 80;|INTERNETLTD, LV ``` produces `"malware.name": "http_post"` - is this expected? _Originally posted by @aleksejsv in https://github.com/certtools/intelmq/issues/1795#issuecomment-797462634_

If the file collector is configured to read data from a non-existing directory, the error message is: > intelmq.lib.exceptions.InvalidArgument: Argument 'path' is invalid. Should be of type: directory. Got '/tmp/foobar/'....

PID files: use file locks

2

Currently there are various problems with the PID file approach for process management. We can improve the situation easily by using file locks on the PID files. Solves problems and...

See thread https://lists.cert.at/pipermail/intelmq-dev/2016-November/000136.html

The `intelmqctl run [bot-id] message` commands always initialize/start the bot instance, but this is not necessary and takes a lot of time.

get rid of base64 encoding for raw

2

- [ ] could there be any problems with redis? - [ ] do other messaging queues support binary data too? - [ ] check if there are any problems...

Some message's format deviate from the ususal format that we have, e.g. in the `intelmq.lib.exceptions` module * PipelineError: `"pipeline failed - %s"` * ConfigurationError: `"%s configuration failed - %s"` Also...