Comments (4)
sabban
commented on June 3, 2024
Hi,
Can you show us an (anonymized) extract of log that triggers your issue ?
Regards,
from nxtool-ng.
Keithsc
commented on June 3, 2024
Hi, We have a pair of Nginx reverse proxies that we use as load balancers for our servers. We forward the Errors from nginx using syslog to a central server. Now I am looking at the logs I wonder if that's what the problem is. Strangely the original nxtool works with these logs but I couldn't get the original version to work with ElasticSearch v5 which is why we thought we'd try nxtool-ng.
2017-06-07T12:48:36+01:00 192.168.X.Y nginx: 2017/06/07 12:48:36 [error] 29006#0: *2630943 NAXSI_FMT: ip=10.241.15.254&server=mysite.com&uri=/_results.aspx&learning=1&vers=0.55.3&total_processed=8877&
total_blocked=5867&block=1&cscore0=$XSS&score0=176&zone0=HEADERS&id0=1315&var_name0=cookie, client: 10.241.15.254, server: mysite.com, request: "GET /_results.aspx?catID=18®ionID=9&orgID=&
word= HTTP/1.1", host: "mysite.com", referrer: "https://mysite.com/_results.aspx?catID=®ionID=9&orgID=&word="<https://mysite.com/_results.aspx?catID=®ionID=9&orgID=&word=>
Keith.
On 07/06/17 15:51, Manuel Sabban wrote:
Hi,
Can you show us an (anonymized) extract of log that triggers your issue ?
Regards,
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub<#28 (comment)>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AFUXkD2OWvzDQez7J-7XYLfRYf_rf4tlks5sBrj0gaJpZM4Nyz8e>.
…--
___ To assist us in answering your requests in a timely manner, please raise a call with our service desk [email protected] - giving your contact details and some information about your request. ___
Keith Scott
Technical Specialist
Architecture & Solutions Service
NSS Information Technology SBU
NHS National Services Scotland
Area 074a
Gyle Square
1 South Gyle Crescent
Edinburgh EH12 9EB
T: 0131 275 6000
Please consider the environment before printing this email.
NHS National Services Scotland is the common name for the Common Services Agency for the Scottish Health Service. www.nhsnss.org<http://www.nhsnss.org>
********************************************************************************************************************
This message may contain confidential information. If you are not the intended recipient please inform the
sender that you have received the message in error before deleting it.
Please do not disclose, copy or distribute information in this e-mail or take any action in reliance on its contents:
to do so is strictly prohibited and may be unlawful.
Thank you for your co-operation.
NHSmail is the secure email and directory service available for all NHS staff in England and Scotland
NHSmail is approved for exchanging patient data and other sensitive information with NHSmail and other accredited email services.
NHSmail provides an email address for your career in the NHS and can be accessed anywhere
For more information and to find out how you can switch, visit http://support.nhs.net/joiningnhsmail
********************************************************************************************************************
from nxtool-ng.
sabban
commented on June 3, 2024
It seems weird.
Can you verify you have the last commit I merged some hours ago ?
Thanks
from nxtool-ng.
Keithsc
commented on June 3, 2024
I downloaded the master.zip file again and it's working! When I run it there a load of text output and it didn't fail so it appears to be able to read my logs.
Thanks for your quick replies.
Keith
On 07/06/17 16:21, Manuel Sabban wrote:
It seems weird.
Can you verify you have the last commit I merged some hours ago ?
Thanks
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub<#28 (comment)>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AFUXkIM3tUe1W48VOYEnL8VrwZ-0wghmks5sBr__gaJpZM4Nyz8e>.
…--
___ To assist us in answering your requests in a timely manner, please raise a call with our service desk [email protected] - giving your contact details and some information about your request. ___
Keith Scott
Technical Specialist
Architecture & Solutions Service
NSS Information Technology SBU
NHS National Services Scotland
Area 074a
Gyle Square
1 South Gyle Crescent
Edinburgh EH12 9EB
T: 0131 275 6000
Please consider the environment before printing this email.
NHS National Services Scotland is the common name for the Common Services Agency for the Scottish Health Service. www.nhsnss.org<http://www.nhsnss.org>
********************************************************************************************************************
This message may contain confidential information. If you are not the intended recipient please inform the
sender that you have received the message in error before deleting it.
Please do not disclose, copy or distribute information in this e-mail or take any action in reliance on its contents:
to do so is strictly prohibited and may be unlawful.
Thank you for your co-operation.
NHSmail is the secure email and directory service available for all NHS staff in England and Scotland
NHSmail is approved for exchanging patient data and other sensitive information with NHSmail and other accredited email services.
NHSmail provides an email address for your career in the NHS and can be accessed anywhere
For more information and to find out how you can switch, visit http://support.nhs.net/joiningnhsmail
********************************************************************************************************************
from nxtool-ng.
Related Issues (20)
- Implement regressive matching on url HOT 2
- ImportError: cannot import name whitelist HOT 3
- support globbing for flat-files arguments HOT 2
- Fix the flat file support HOT 1
- add the --slack cli argument HOT 1
- Implement var_name reduction
- Implement regexp factorization HOT 1
- Duplicates generated rules
- nxtool was not able to generate meaningful whitelist HOT 2
- Whitelist generation fails due to core dump
- No search type for [count] HOT 1
- whitelisting ratio
- Error importing logs into Elastic on Centos 7 HOT 10
- Bug on whitelist generation with flat file HOT 3
- log unicity
- whitelist generation seems a bit restrictive on the number of samples
- --stdin seems broken HOT 1
- --typing
- Documentation of ES structure HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from nxtool-ng.