Your message dated Mon, 07 Sep 2026 17:26:53 +0000
with message-id <[email protected]>
and subject line Bug#1146553: Removed package(s) from unstable
has caused the Debian Bug report #1032433,
regarding prelude-correlator: Not performing correlations (probably because
plugins errors)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1032433: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032433
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: prelude-correlator
Version: 5.2.0-1.1
Severity: normal
OS (up2date 2023.03.06): bookworm 6.1.0-5-amd64 #1 SMP PREEMPT_DYNAMIC
Debian 6.1.12-1 (2023-02-15) x86_64
Running prelude-correlator shows problems with Storm,Sweep,Scan and Worm
plugins:
***
preludecorrelator.pluginmanager: ERROR: [EventStormPlugin]: exception
occurred while running#012Traceback (most recent call last):#012 File
"/usr/lib/python3/dist-packages/preludecorrelator/pluginmanager.py",
line 250, in run#012 plugin.run_safe(idmef)#012 File
"/usr/lib/python3/dist-packages/preludecorrelator/pluginmanager.py",
line 58, in run_safe#012 self.run(idmef)#012 File
"//etc/prelude-correlator/rules/python/EventStormPlugin.py", line 34, in
run#012 source =
idmef.get("alert.source(*).node.address(*).address")#012
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^#012 File
"/usr/lib/python3/dist-packages/preludecorrelator/idmef.py", line 55, in
get#012 value = utils.flatten(value)#012
^^^^^^^^^^^^^^^^^^^^#012 File
"/usr/lib/python3/dist-packages/preludecorrelator/utils.py", line 41, in
flatten#012 if isinstance(el, collections.Iterable) and not
isinstance(el, str):#012
^^^^^^^^^^^^^^^^^^^^#012AttributeError: module 'collections' has no
attribute 'Iterable'
preludecorrelator.pluginmanager: ERROR: [EventSweepPlugin]: exception
occurred while running#012Traceback (most recent call last):#012 File
"/usr/lib/python3/dist-packages/preludecorrelator/pluginmanager.py",
line 250, in run#012 plugin.run_safe(idmef)#012 File
"/usr/lib/python3/dist-packages/preludecorrelator/pluginmanager.py",
line 58, in run_safe#012 self.run(idmef)#012 File
"//etc/prelude-correlator/rules/python/EventSweepPlugin.py", line 35, in
run#012 source =
idmef.get("alert.source(*).node.address(*).address")#012
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^#012 File
"/usr/lib/python3/dist-packages/preludecorrelator/idmef.py", line 55, in
get#012 value = utils.flatten(value)#012
^^^^^^^^^^^^^^^^^^^^#012 File
"/usr/lib/python3/dist-packages/preludecorrelator/utils.py", line 41, in
flatten#012 if isinstance(el, collections.Iterable) and not
isinstance(el, str):#012
^^^^^^^^^^^^^^^^^^^^#012AttributeError: module 'collections' has no
attribute 'Iterable'
preludecorrelator.pluginmanager: ERROR: [EventScanPlugin]: exception
occurred while running#012Traceback (most recent call last):#012 File
"/usr/lib/python3/dist-packages/preludecorrelator/pluginmanager.py",
line 250, in run#012 plugin.run_safe(idmef)#012 File
"/usr/lib/python3/dist-packages/preludecorrelator/pluginmanager.py",
line 58, in run_safe#012 self.run(idmef)#012 File
"//etc/prelude-correlator/rules/python/EventScanPlugin.py", line 32, in
run#012 source =
idmef.get("alert.source(*).node.address(*).address")#012
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^#012 File
"/usr/lib/python3/dist-packages/preludecorrelator/idmef.py", line 55, in
get#012 value = utils.flatten(value)#012
^^^^^^^^^^^^^^^^^^^^#012 File
"/usr/lib/python3/dist-packages/preludecorrelator/utils.py", line 41, in
flatten#012 if isinstance(el, collections.Iterable) and not
isinstance(el, str):#012
^^^^^^^^^^^^^^^^^^^^#012AttributeError: module 'collections' has no
attribute 'Iterable'
preludecorrelator.pluginmanager: ERROR: [WormPlugin]: exception occurred
while running#012Traceback (most recent call last):#012 File
"/usr/lib/python3/dist-packages/preludecorrelator/pluginmanager.py",
line 250, in run#012 plugin.run_safe(idmef)#012 File
"/usr/lib/python3/dist-packages/preludecorrelator/pluginmanager.py",
line 58, in run_safe#012 self.run(idmef)#012 File
"//etc/prelude-correlator/rules/python/WormPlugin.py", line 46, in
run#012 for target in
idmef.get("alert.target(*).node.address(*).address"):#012
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^#012 File
"/usr/lib/python3/dist-packages/preludecorrelator/idmef.py", line 55, in
get#012 value = utils.flatten(value)#012
^^^^^^^^^^^^^^^^^^^^#012 File
"/usr/lib/python3/dist-packages/preludecorrelator/utils.py", line 41, in
flatten#012 if isinstance(el, collections.Iterable) and not
isinstance(el, str):#012
^^^^^^^^^^^^^^^^^^^^#012AttributeError: module 'collections' has no
attribute 'Iterable'
***
I am not sure if this is the main reason why correlations are not
performed at all.
Due to #996878 it's hard to tell if it worked before (in bullseye).
Under Centos-like distros, prelude-correlator works properly with this
packages from EPEL8:
prelude-correlator.x86_64 5.2.0-1.el8
python3-prelude-correlator.x86_64 5.2.0-1.el8
Expected behaviour: performing correlations without plugins errors.
--
Pozdrawiam Krzysztof Jastrzębski <><
krzysztof[at]jastrzebscy[dot]pl http://www.jastrzebscy.pl/
--- End Message ---
--- Begin Message ---
Version: 5.2.0-1.2+rm
Dear submitter,
as the package prelude-correlator has just been removed from the Debian archive
unstable we hereby close the associated bug reports. We are sorry
that we couldn't deal with your issue properly.
For details on the removal, please see https://bugs.debian.org/1146553
The version of this package that was in Debian prior to this removal
can still be found using https://snapshot.debian.org/.
Please note that the changes have been done on the master archive and
will not propagate to any mirrors until the next dinstall run at the
earliest.
This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
[email protected].
Debian distribution maintenance software
pp.
Thorsten Alteholz (the ftpmaster behind the curtain)
--- End Message ---
