CBD LIsts

210 views
Skip to first unread message

Victoria Babasanmi

unread,
Jul 31, 2021, 2:21:32 PM7/31/21
to Wazuh mailing list
Hi I am trying to integrate with alien vault ip reputation using CDB lists using this steps https://wazuh.com/blog/using-osint-to-create-cdb-lists/

when i run this 

sudo /var/ossec/etc/lists/iplist-to-cdblist.py /var/ossec/etc/lists/alienvault_reputation.ipset /var/ossec/etc/lists/blacklist-alienvault

i get ":No such file or directory" error mesage

How do i resolve this

Thanks and Best Regards,
Victoria

Supragya Karki

unread,
Aug 1, 2021, 8:12:33 AM8/1/21
to Victoria Babasanmi, Wazuh mailing list
I also got the same issue and then I ran it with 'python' in front of that command. It worked.

python /var/ossec/etc/lists/iplist-to-cdblist.py /var/ossec/etc/lists/alienvault_reputation.ipset /var/ossec/etc/lists/blacklist-alienvault

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/b32880ea-b285-4b3b-acc6-50594a91be52n%40googlegroups.com.

Juan Nicolás Asselle

unread,
Aug 2, 2021, 8:26:54 AM8/2/21
to Wazuh mailing list

Hi Victoria,

The problem seems to be the encoding of the downloaded file. It is encoded in Windows format, with line breaks \r\n when it should be just \n.

A quick fix is to change the file encoding, to do this you could use the dos2unix tool (dos2unix(1) - Linux man page).I f you use redhat-based distributions, such as CentOS, you can install it with the following command:

yum install dos2unix

If you use debian based distributions, such as Ubuntu, you can install it with the following command:

apt install dos2unix

After installing the tool, you can change the the file encoding as follows:

dos2unix /var/ossec/etc/lists/iplist-to-cdblist.py

I open an issue about this to fix it permanently : https://github.com/wazuh/wazuh-documentation/issues/4092

Please let me know if this worked for you.
Regards,
Nico

Reply all
Reply to author
Forward
0 new messages