Skip to content
Snippets Groups Projects
Commit 0776d9cb authored by Damon Schröter's avatar Damon Schröter
Browse files

init

parents
No related branches found
No related tags found
No related merge requests found
main.py 0 → 100644
import xml.etree.ElementTree as ET
xml_string = ET.ElementTree(file='test.xml')
for elem in xml_string.iter():
if elem.tag in {"Alert","Analyser", "CreateTime", "DetectTime", "AnalyserTime", "Source", "Target", "Classification", "Assessment", "AdditionalData"}:
for i in elem.attrib:
if elem.tag == "Alert":
print(f"{elem.tag.lower()}.{i} {elem.attrib[i]}")
else:
print(f"alert.{elem.tag.lower()}.{i} {elem.attrib[i]}")
\ No newline at end of file
Source diff could not be displayed: it is too large. Options to address this: view the blob.
test.xml 0 → 100644
<?xml version='1.0' encoding='cp1252'?>
<IDMEF-Messages>
<IDMEF-Message version="1.0"><Alert messageid="f62537c2-77b8-49c7-a0a2-24c4b81b20f8"><Analyzer name="cz.cesnet.hugo.haas_dionaea" /><DetectTime ntpstamp="0xe030249b.0x0004c352">2019-03-11T00:04:43.312146+02:00</DetectTime><Source spoofed="unknown"><Node><Address category="ipv4-addr"><address>22.198.228.92</address></Address></Node><Service><portlist>3508</portlist><protocol>tcp</protocol></Service></Source><Target decoy="unknown"><Node><Address category="ipv4-addr"><address>192.0.0.0</address></Address></Node><Service><portlist>445</portlist><protocol>tcp</protocol></Service></Target><Classification text="Recon.Scanning" /></Alert></IDMEF-Message>
<IDMEF-Message version="1.0"><Alert messageid="7f3e0acf-6812-442c-a339-f069a5d83524"><Analyzer name="cz.cesnet.hugo.haas_dionaea" /><DetectTime ntpstamp="0xe030248e.0x0006182c">2019-03-11T00:04:30.399404+02:00</DetectTime><Source spoofed="unknown"><Node><Address category="ipv4-addr"><address>63.130.102.28</address></Address></Node><Service><portlist>3714</portlist><protocol>tcp</protocol></Service></Source><Target decoy="unknown"><Node><Address category="ipv4-addr"><address>192.0.0.0</address></Address></Node><Service><portlist>445</portlist><protocol>tcp</protocol></Service></Target><Classification text="Recon.Scanning" /></Alert></IDMEF-Message>
<IDMEF-Message version="1.0"><Alert messageid="7b2a01b2-6d01-47d8-9bf1-4a8eedf41c52"><Analyzer name="cz.cesnet.hugo.haas_dionaea" /><DetectTime ntpstamp="0xe03023e3.0x00087e0a">2019-03-11T00:01:39.556554+02:00</DetectTime><Source spoofed="unknown"><Node><Address category="ipv4-addr"><address>14.205.135.200</address></Address></Node><Service><portlist>54637</portlist><protocol>tcp</protocol></Service></Source><Target decoy="unknown"><Node><Address category="ipv4-addr"><address>192.0.0.0</address></Address></Node><Service><portlist>445</portlist><protocol>tcp</protocol></Service></Target><Classification text="Recon.Scanning" /></Alert></IDMEF-Message>
<IDMEF-Message version="1.0"><Alert messageid="78957bda-6808-490d-b7cb-b5b3009a7231"><Analyzer name="cz.cesnet.hugo.haas_dionaea" /><DetectTime ntpstamp="0xe0302487.0x000b5dcc">2019-03-11T00:04:23.744908+02:00</DetectTime><Source spoofed="unknown"><Node><Address category="ipv4-addr"><address>227.253.185.165</address></Address></Node><Service><portlist>49167</portlist><protocol>udp</protocol></Service></Source><Target decoy="unknown"><Node><Address category="ipv4-addr"><address>192.0.0.0</address></Address></Node><Service><portlist>5060</portlist><protocol>udp</protocol></Service></Target><Classification text="Recon.Scanning" /></Alert></IDMEF-Message>
<IDMEF-Message version="1.0"><Alert messageid="77e71118-4572-4d0a-984c-ef33991d547a"><Analyzer name="cz.cesnet.hugo.haas_dionaea" /><DetectTime ntpstamp="0xe03025d6.0x000ba804">2019-03-11T00:09:58.763908+02:00</DetectTime><Source spoofed="unknown"><Node><Address category="ipv4-addr"><address>227.253.185.165</address></Address></Node><Service><portlist>65026</portlist><protocol>udp</protocol></Service></Source><Target decoy="unknown"><Node><Address category="ipv4-addr"><address>192.0.0.0</address></Address></Node><Service><portlist>5060</portlist><protocol>udp</protocol></Service></Target><Classification text="Recon.Scanning" /></Alert></IDMEF-Message>
</IDMEF-Messages>
\ No newline at end of file
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment