init

main.py

+import xml.etree.ElementTree as ET
+xml_string = ET.ElementTree(file='test.xml')
+
+for elem in xml_string.iter():
+    if elem.tag in {"Alert","Analyser", "CreateTime", "DetectTime", "AnalyserTime", "Source", "Target", "Classification", "Assessment", "AdditionalData"}:
+        for i in elem.attrib:  
+            if elem.tag == "Alert": 
+                print(f"{elem.tag.lower()}.{i} {elem.attrib[i]}")
+            else: 
+                print(f"alert.{elem.tag.lower()}.{i} {elem.attrib[i]}")
+
+
+
+
+    
\ No newline at end of file

test.xml

+<?xml version='1.0' encoding='cp1252'?>
+<IDMEF-Messages>
+
+<IDMEF-Message version="1.0"><Alert messageid="f62537c2-77b8-49c7-a0a2-24c4b81b20f8"><Analyzer name="cz.cesnet.hugo.haas_dionaea" /><DetectTime ntpstamp="0xe030249b.0x0004c352">2019-03-11T00:04:43.312146+02:00</DetectTime><Source spoofed="unknown"><Node><Address category="ipv4-addr"><address>22.198.228.92</address></Address></Node><Service><portlist>3508</portlist><protocol>tcp</protocol></Service></Source><Target decoy="unknown"><Node><Address category="ipv4-addr"><address>192.0.0.0</address></Address></Node><Service><portlist>445</portlist><protocol>tcp</protocol></Service></Target><Classification text="Recon.Scanning" /></Alert></IDMEF-Message>
+
+<IDMEF-Message version="1.0"><Alert messageid="7f3e0acf-6812-442c-a339-f069a5d83524"><Analyzer name="cz.cesnet.hugo.haas_dionaea" /><DetectTime ntpstamp="0xe030248e.0x0006182c">2019-03-11T00:04:30.399404+02:00</DetectTime><Source spoofed="unknown"><Node><Address category="ipv4-addr"><address>63.130.102.28</address></Address></Node><Service><portlist>3714</portlist><protocol>tcp</protocol></Service></Source><Target decoy="unknown"><Node><Address category="ipv4-addr"><address>192.0.0.0</address></Address></Node><Service><portlist>445</portlist><protocol>tcp</protocol></Service></Target><Classification text="Recon.Scanning" /></Alert></IDMEF-Message>
+
+<IDMEF-Message version="1.0"><Alert messageid="7b2a01b2-6d01-47d8-9bf1-4a8eedf41c52"><Analyzer name="cz.cesnet.hugo.haas_dionaea" /><DetectTime ntpstamp="0xe03023e3.0x00087e0a">2019-03-11T00:01:39.556554+02:00</DetectTime><Source spoofed="unknown"><Node><Address category="ipv4-addr"><address>14.205.135.200</address></Address></Node><Service><portlist>54637</portlist><protocol>tcp</protocol></Service></Source><Target decoy="unknown"><Node><Address category="ipv4-addr"><address>192.0.0.0</address></Address></Node><Service><portlist>445</portlist><protocol>tcp</protocol></Service></Target><Classification text="Recon.Scanning" /></Alert></IDMEF-Message>
+
+<IDMEF-Message version="1.0"><Alert messageid="78957bda-6808-490d-b7cb-b5b3009a7231"><Analyzer name="cz.cesnet.hugo.haas_dionaea" /><DetectTime ntpstamp="0xe0302487.0x000b5dcc">2019-03-11T00:04:23.744908+02:00</DetectTime><Source spoofed="unknown"><Node><Address category="ipv4-addr"><address>227.253.185.165</address></Address></Node><Service><portlist>49167</portlist><protocol>udp</protocol></Service></Source><Target decoy="unknown"><Node><Address category="ipv4-addr"><address>192.0.0.0</address></Address></Node><Service><portlist>5060</portlist><protocol>udp</protocol></Service></Target><Classification text="Recon.Scanning" /></Alert></IDMEF-Message>
+
+<IDMEF-Message version="1.0"><Alert messageid="77e71118-4572-4d0a-984c-ef33991d547a"><Analyzer name="cz.cesnet.hugo.haas_dionaea" /><DetectTime ntpstamp="0xe03025d6.0x000ba804">2019-03-11T00:09:58.763908+02:00</DetectTime><Source spoofed="unknown"><Node><Address category="ipv4-addr"><address>227.253.185.165</address></Address></Node><Service><portlist>65026</portlist><protocol>udp</protocol></Service></Source><Target decoy="unknown"><Node><Address category="ipv4-addr"><address>192.0.0.0</address></Address></Node><Service><portlist>5060</portlist><protocol>udp</protocol></Service></Target><Classification text="Recon.Scanning" /></Alert></IDMEF-Message>
+
+</IDMEF-Messages>
\ No newline at end of file