Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix added warning IP list too large #30217

Conversation

franciscojoseabellan
Copy link
Contributor

@franciscojoseabellan franciscojoseabellan commented Oct 17, 2023

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

  • In Progress
  • Ready
  • In Hold - (Reason for hold)

Related Issues

fixes: link to the issue

Description

A few sentences describing the overall goals of the pull request's commits.

Must have

  • Tests
  • Documentation

@CLAassistant
Copy link

CLAassistant commented Oct 17, 2023

CLA assistant check
All committers have signed the CLA.

@content-bot content-bot added Contribution Thank you! Contributions are always welcome! External PR Xsoar Support Level Indicates that the contribution is for XSOAR supported pack labels Oct 17, 2023
@content-bot content-bot changed the base branch from master to contrib/franciscojoseabellan_warn_IP_list_large October 17, 2023 09:08
@content-bot
Copy link
Collaborator

Thank you for your contribution. Your generosity and caring are unrivaled! Make sure to register your contribution by filling the Contribution Registration form, so our content wizard @MosheEichler will know the proposed changes are ready to be reviewed.
For your convenience, here is a link to the contributions SLAs document.

@content-bot
Copy link
Collaborator

Hi @franciscojoseabellan, thanks for contributing to a Cortex XSOAR supported pack. To receive credit for your generous contribution please follow this link.

@content-bot content-bot added Community Contribution Form Filled Whether contribution form filled or not. labels Oct 17, 2023
Copy link
Contributor

@MosheEichler MosheEichler left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @franciscojoseabellan,
Thank you for your contribution!
Good work :)

Please bump the pack version in the pack_metadata.json file and add notes describing your changes to a new Release Notes file.
To do that, please run the demisto-sdk update-release-notes command - for more information please see: https://xsoar.pan.dev/docs/concepts/demisto-sdk#update-release-notes.

Please feel free to reach out to me with any questions - I'm available here or on slack :)
Thanks again

@MosheEichler MosheEichler added the pending-contributor The PR is pending the response of its creator label Oct 17, 2023
@franciscojoseabellan
Copy link
Contributor Author

franciscojoseabellan commented Oct 18, 2023

Hello MosheEichler

After executing the command, we got notified that no rellevant changes were made in this commit

image

@@ -1337,6 +1337,7 @@
"use_ip_nt_range_tags_include", "use_ip_nt_range_tags_exclude",
"active",
"scanners_in_network",
"fqdn",
Copy link
Contributor

@MosheEichler MosheEichler Oct 18, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why did you add it?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I added it because Qualysv2 lacked the parameter fqdn
If not added, Demisto returns an error:

scan_create_no_fqdn

@MosheEichler
Copy link
Contributor

Hello MosheEichler

After executing the command, we got notified that no rellevant changes were made in this commit

image

Hey @franciscojoseabellan
Don't wory I'll take care on it.
Please see my comment.

@@ -1488,7 +1489,10 @@ def __init__(self, base_url, username, password, verify=True, proxy=False, heade

@staticmethod
def error_handler(res):
err_msg = f"Error in API call [{res.status_code}] - {res.reason}"
err_msg = ""
if res.status_code == 414 or res.status_code == 520:
Copy link
Contributor

@MosheEichler MosheEichler Oct 19, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you plesae add a reference (API documentetion) for this error (with status codes)?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It is an error when we provide to the ip field an string of approximately between 5000 and 12000 characters containing IP, we receive a 414 error from the API, when we provide more than approximately 12000 characters containing IPs, we receive a 520 error,

We do not know if it is an error related to the Demisto processing of large characters in the URL

image

image

@MosheEichler MosheEichler added the pending-demo Demo pending label Oct 19, 2023
@MosheEichler
Copy link
Contributor

Hi @franciscojoseabellan, the code looks good!

We're ready for a demo. Please check this page, and let me know when you're available for one over DFIR.

@MosheEichler
Copy link
Contributor

CLA assistant check Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.

Hey @franciscojoseabellan
Please sing the CLA

@franciscojoseabellan
Copy link
Contributor Author

Hi @MosheEichler,

Can I find you with the same username (MosheEichler) on Slack to talk about the demo?

Regards,

@MosheEichler
Copy link
Contributor

Hi @MosheEichler,

Can I find you with the same username (MosheEichler) on Slack to talk about the demo?

Regards,

Yes. search Moshe Eichler.

@MosheEichler MosheEichler merged commit d9b5a01 into demisto:contrib/franciscojoseabellan_warn_IP_list_large Oct 23, 2023
13 of 14 checks passed
@franciscojoseabellan
Copy link
Contributor Author

@MosheEichler

Do you know when this PR would be incorporated in the master branch of demisto?

Thanks for your help

Regards,

MosheEichler added a commit that referenced this pull request Nov 16, 2023
* fix added warning IP list too large (#30217)

* fix added warning

* Added fqdn parameter to qualys-schedule-scan-create command

* flake8

* pre commit

* RN

* Update Packs/qualys/ReleaseNotes/2_0_6.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* fix description

* docker

* RN

* SysAid add get file (#30718)

* SysAid add get file (#30583)

* SysAid add get file

* Fixed error SysAid add get file

* docker

* Add file output

* Update Packs/SysAid/ReleaseNotes/1_0_13.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/SysAid/Integrations/SysAid/SysAid.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/SysAid/Integrations/SysAid/SysAid.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/SysAid/Integrations/SysAid/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* fixed UT

---------

Co-authored-by: Giorgio <[email protected]>
Co-authored-by: MosheEichler <[email protected]>
Co-authored-by: Moshe Eichler <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

* update conf file (#30743)

* remove/change values (#30728)

* SentinelOne v 3 2 12 (#30740)

* SentinelOne v 3 2 12 (#30626)

* Bug Fixes

* updated the docker image

* updated the release notes

* making chages in threat request call

* review comment fix

* fixed release notes

* docker

---------

Co-authored-by: munna-metron <[email protected]>
Co-authored-by: MosheEichler <[email protected]>

* Netcraft Revamp (#29527)

* init

* started fetch

* finished fetch

* name changes

* fixed output in yml

* added command names

* mirroring part 1

* added incident type

* fixed incident type

* fethcing logic works!

* cmnd: netcraft-attack-report

* cmnd: netcraft-attack-report complete

* reference new pack in old

* cmnd: netcraft-attack-report complete

* session changes

* added classifier

* added commands

* commands continued

* commands continued

* order change

* test-module

* examples init

* session changes

* pre update

* finished code

* added TPB

* unit-tests init

* test_data TO BE DELETED

* test_data TO BE DELETED

* test_data complete

* test_data.py complete

* unit-tests continued

* unit-tests complete

* fixed KeyError bug

* fixed SubmissionNextToken bug

* fixed pagination bug

* remove unused test data

* improved UI

* silence secret ignore

* silence line-too-long

* silence secret ignore

* added readme; fixed png

* tests/format complete

* default args

* session changes

* session changes

* CR changes

* finished docs

* fix docs

* fix docs

* added layout

* clearer description

* add error for no file

* add error for no file

* demo changes part 1

* demo changes part 2

* demo changes part 3

* demo changes part 4

* demo changes part 5

* fixed unit-tests

* update escalate docs

* authorise => authorize

* match case => if-elif

* CR changes

* Apply suggestions from code review

Co-authored-by: ShirleyDenkberg <[email protected]>

* fixed unit-tests

* remove trailing whitespace

* try running build

* fixed upload bug

* name change to avoid conflict

* pack readme part 1

* release notes

* add image

* removed unnecessary files

* cleaned build problems

* pack readme part 2

* readme complete

* readme complete

* added layout, mapper, type; not formatted

* capitalize 'service'

* get_file_path

* trial fix for unittests

* fixed unit-tests

* update docker

* small changes

* doc review changes

* update TPB

* silence secret detections

* classifier fixed

* demo changes

* demo changes

* small change

* UI works

* fix tests and docs

* update docker

* added types to yaml

* fixed file submit bug

* layout for xsoar only

* build wars: round 1

* build wars: round 2

* build wars: round 3

* build wars: round 4

* build wars: round 5

* build wars: round 6

* build wars: round 7

* Update conf.json

* remove email address

* fix TPB

* incease retry-interval

* raised timeout threshold

* update docker

* raised from_version

---------

Co-authored-by: ShirleyDenkberg <[email protected]>

* docker

* change map

* change scan

* revert

---------

Co-authored-by: franciscojoseabellan <[email protected]>
Co-authored-by: MosheEichler <[email protected]>
Co-authored-by: Moshe Eichler <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>
Co-authored-by: Giorgio <[email protected]>
Co-authored-by: Israel Lappe <[email protected]>
Co-authored-by: Adi Bamberger Edri <[email protected]>
Co-authored-by: munna-metron <[email protected]>
Co-authored-by: Jacob Levy <[email protected]>
sapirshuker pushed a commit that referenced this pull request Dec 21, 2023
* fix added warning IP list too large (#30217)

* fix added warning

* Added fqdn parameter to qualys-schedule-scan-create command

* flake8

* pre commit

* RN

* Update Packs/qualys/ReleaseNotes/2_0_6.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* fix description

* docker

* RN

* SysAid add get file (#30718)

* SysAid add get file (#30583)

* SysAid add get file

* Fixed error SysAid add get file

* docker

* Add file output

* Update Packs/SysAid/ReleaseNotes/1_0_13.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/SysAid/Integrations/SysAid/SysAid.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/SysAid/Integrations/SysAid/SysAid.yml

Co-authored-by: ShirleyDenkberg <[email protected]>

* Update Packs/SysAid/Integrations/SysAid/README.md

Co-authored-by: ShirleyDenkberg <[email protected]>

* fixed UT

---------

Co-authored-by: Giorgio <[email protected]>
Co-authored-by: MosheEichler <[email protected]>
Co-authored-by: Moshe Eichler <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>

* update conf file (#30743)

* remove/change values (#30728)

* SentinelOne v 3 2 12 (#30740)

* SentinelOne v 3 2 12 (#30626)

* Bug Fixes

* updated the docker image

* updated the release notes

* making chages in threat request call

* review comment fix

* fixed release notes

* docker

---------

Co-authored-by: munna-metron <[email protected]>
Co-authored-by: MosheEichler <[email protected]>

* Netcraft Revamp (#29527)

* init

* started fetch

* finished fetch

* name changes

* fixed output in yml

* added command names

* mirroring part 1

* added incident type

* fixed incident type

* fethcing logic works!

* cmnd: netcraft-attack-report

* cmnd: netcraft-attack-report complete

* reference new pack in old

* cmnd: netcraft-attack-report complete

* session changes

* added classifier

* added commands

* commands continued

* commands continued

* order change

* test-module

* examples init

* session changes

* pre update

* finished code

* added TPB

* unit-tests init

* test_data TO BE DELETED

* test_data TO BE DELETED

* test_data complete

* test_data.py complete

* unit-tests continued

* unit-tests complete

* fixed KeyError bug

* fixed SubmissionNextToken bug

* fixed pagination bug

* remove unused test data

* improved UI

* silence secret ignore

* silence line-too-long

* silence secret ignore

* added readme; fixed png

* tests/format complete

* default args

* session changes

* session changes

* CR changes

* finished docs

* fix docs

* fix docs

* added layout

* clearer description

* add error for no file

* add error for no file

* demo changes part 1

* demo changes part 2

* demo changes part 3

* demo changes part 4

* demo changes part 5

* fixed unit-tests

* update escalate docs

* authorise => authorize

* match case => if-elif

* CR changes

* Apply suggestions from code review

Co-authored-by: ShirleyDenkberg <[email protected]>

* fixed unit-tests

* remove trailing whitespace

* try running build

* fixed upload bug

* name change to avoid conflict

* pack readme part 1

* release notes

* add image

* removed unnecessary files

* cleaned build problems

* pack readme part 2

* readme complete

* readme complete

* added layout, mapper, type; not formatted

* capitalize 'service'

* get_file_path

* trial fix for unittests

* fixed unit-tests

* update docker

* small changes

* doc review changes

* update TPB

* silence secret detections

* classifier fixed

* demo changes

* demo changes

* small change

* UI works

* fix tests and docs

* update docker

* added types to yaml

* fixed file submit bug

* layout for xsoar only

* build wars: round 1

* build wars: round 2

* build wars: round 3

* build wars: round 4

* build wars: round 5

* build wars: round 6

* build wars: round 7

* Update conf.json

* remove email address

* fix TPB

* incease retry-interval

* raised timeout threshold

* update docker

* raised from_version

---------

Co-authored-by: ShirleyDenkberg <[email protected]>

* docker

* change map

* change scan

* revert

---------

Co-authored-by: franciscojoseabellan <[email protected]>
Co-authored-by: MosheEichler <[email protected]>
Co-authored-by: Moshe Eichler <[email protected]>
Co-authored-by: ShirleyDenkberg <[email protected]>
Co-authored-by: Giorgio <[email protected]>
Co-authored-by: Israel Lappe <[email protected]>
Co-authored-by: Adi Bamberger Edri <[email protected]>
Co-authored-by: munna-metron <[email protected]>
Co-authored-by: Jacob Levy <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Community Contribution Form Filled Whether contribution form filled or not. Contribution Thank you! Contributions are always welcome! External PR pending-contributor The PR is pending the response of its creator pending-demo Demo pending Xsoar Support Level Indicates that the contribution is for XSOAR supported pack
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants