Exemple #1
0
def setup():
    parser = argparse.ArgumentParser(
        description='Watches for attack file from anomaly detector ' +
        'and transmists it via TAXII')
    parser.add_argument('-d',
                        '--debug',
                        required=False,
                        action='store_true',
                        help='run with debug logging')
    parser.add_argument('-p',
                        '--properties',
                        type=str,
                        required=False,
                        default='axd.properties',
                        help='properties file')

    args = parser.parse_args()
    #print "In file: ",args.in_file
    FORMAT = '%(asctime)s - %(name)s - %(levelname)s - %(message)s'
    logging_level = logging.DEBUG if args.debug else logging.INFO
    logger = logging.getLogger('simple_example')
    logger.setLevel(logging_level)

    ch = logging.StreamHandler()
    ch.setLevel(logging_level)
    formatter = logging.Formatter(
        '%(asctime)s - %(name)s - %(levelname)s - %(message)s')

    ch.setFormatter(formatter)
    #logger.setLevel(logging_level)
    #logger.setLevel(logging.DEBUG)
    #ch.setFormatter(formatter)
    print 'logging.DEBUG', logging.DEBUG
    logger.addHandler(ch)

    logger.debug('debug message')

    #sys.exit(-1)
    properties = EnvProperties(args.properties)

    # Retrieve the attack file directory where we'll watch for new files

    atk_file_dir = properties.getProperty('AttackXmitD.AttackFileDir')

    logger.debug('Attack File Dir: %s', atk_file_dir)

    watch_and_xmit = WatchAndXmit(atk_file_dir, properties)
    watch_and_xmit.startLoop()
Exemple #2
0
def setup():
    parser = argparse.ArgumentParser(
        description='Watches for attack STIX message from anomaly detector, ' +
        'stores it in sqlite DB and sends signal to ASG')
    parser.add_argument('-d',
                        '--debug',
                        required=False,
                        action='store_true',
                        help='run with debug logging')
    parser.add_argument('-p',
                        '--properties',
                        type=str,
                        required=False,
                        default='ard.properties',
                        help='properties file')

    args = parser.parse_args()
    #print "In file: ",args.in_file
    FORMAT = '%(asctime)s - %(name)s - %(levelname)s - %(message)s'
    logging_level = logging.DEBUG if args.debug else logging.INFO
    logger = logging.getLogger('simple_example')
    logger.setLevel(logging_level)

    ch = logging.StreamHandler()
    ch.setLevel(logging_level)
    formatter = logging.Formatter(
        '%(asctime)s - %(name)s - %(levelname)s - %(message)s')

    ch.setFormatter(formatter)
    print 'logging.DEBUG', logging.DEBUG
    logger.addHandler(ch)

    logger.debug('debug message')

    #sys.exit(-1)
    properties = EnvProperties(args.properties)

    # Retrieve the attack file directory where we'll watch for new files

    incoming_port = properties.getProperty('AttackRcvD.IncomingPort')
    sleep_sec = int(properties.getProperty('AttackRcvD.DBWatchSleepS'))
    named_pipe = properties.getProperty('AttackRcvD.NamedPipe')
    p_fh = open(named_pipe, 'w+')

    # Create MsgOnInsert object that will watch for new insertions into the
    # database by django
    moi = MsgOnInsert(os.environ['YETIPATH'] + '/sqlite3.db', p_fh,
                      'taxii_services_inboxmessage', sleep_sec)
    # Start thread
    thread.start_new_thread(moi.moiThread, ())

    sys.path.append(os.environ['YETIPATH'])
    os.environ.setdefault("DJANGO_SETTINGS_MODULE", "yeti.settings")

    exec_args = [
        os.environ['YETIPATH'] + '/manage.py', 'runsslserver', '--addrport',
        '0.0.0.0:' + incoming_port
    ]

    execute_from_command_line(exec_args)
    moi.loopFlag = False