Minor bug in SQUIL

41 views
Skip to first unread message

4evernoob

unread,
Nov 13, 2017, 6:34:06 PM11/13/17
to security-onion
If you right click entry in SQUIL and select Dsheild lookup the web page that it attempts to open is https://secure.dshield.org/ipinfo.php?ip= when it needs to be https://secure.dshield.org/ipinfo.html?ip=

Wes Lambert

unread,
Nov 13, 2017, 6:40:09 PM11/13/17
to securit...@googlegroups.com
Thanks 4evernoob!

In the meantime (until this is updated), you can edit /usr/lib/sguil/extdata.tcl with the appropriate URL (and restart the Sguil client).

Thanks,
Wes

On Mon, Nov 13, 2017 at 6:34 PM, 4evernoob <bert....@gmail.com> wrote:
If you right click entry in SQUIL and select Dsheild lookup the web page that it attempts to open is https://secure.dshield.org/ipinfo.php?ip= when it needs to be https://secure.dshield.org/ipinfo.html?ip=

--
Follow Security Onion on Twitter!
https://twitter.com/securityonion
---
You received this message because you are subscribed to the Google Groups "security-onion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to security-onion+unsubscribe@googlegroups.com.
To post to this group, send email to security-onion@googlegroups.com.
Visit this group at https://groups.google.com/group/security-onion.
For more options, visit https://groups.google.com/d/optout.

Doug Burks

unread,
Nov 13, 2017, 7:29:01 PM11/13/17
to securit...@googlegroups.com
I've created Issue 1171 for this:
https://github.com/Security-Onion-Solutions/security-onion/issues/1171

On Mon, Nov 13, 2017 at 6:40 PM, Wes Lambert <wlamb...@gmail.com> wrote:
> Thanks 4evernoob!
>
> In the meantime (until this is updated), you can edit
> /usr/lib/sguil/extdata.tcl with the appropriate URL (and restart the Sguil
> client).
>
> Thanks,
> Wes
>
> On Mon, Nov 13, 2017 at 6:34 PM, 4evernoob <bert....@gmail.com> wrote:
>>
>> If you right click entry in SQUIL and select Dsheild lookup the web page
>> that it attempts to open is https://secure.dshield.org/ipinfo.php?ip= when
>> it needs to be https://secure.dshield.org/ipinfo.html?ip=
>>
>> --
>> Follow Security Onion on Twitter!
>> https://twitter.com/securityonion
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "security-onion" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to security-onio...@googlegroups.com.
>> To post to this group, send email to securit...@googlegroups.com.
>> Visit this group at https://groups.google.com/group/security-onion.
>> For more options, visit https://groups.google.com/d/optout.
>
>
> --
> Follow Security Onion on Twitter!
> https://twitter.com/securityonion
> ---
> You received this message because you are subscribed to the Google Groups
> "security-onion" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to security-onio...@googlegroups.com.
> To post to this group, send email to securit...@googlegroups.com.
--
Doug Burks
Reply all
Reply to author
Forward
0 new messages