[
https://issues.apache.org/jira/browse/NIFI-1971?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15483843#comment-15483843
]
ASF GitHub Bot commented on NIFI-1971:
--------------------------------------
Github user trixpan commented on the issue:
https://github.com/apache/nifi/pull/858
@pvillard31 it is a bug caused by an extra newline. I missed due to some
simplifications done within the jUnit.
It is caused by the new line present in here:
https://github.com/apache/nifi/pull/858/files#diff-5c34d310642cc536b1c8b2f6a87c7043R223
This newline should only be added if the processor is operating in batch
mode.
In summary the whois input should be:
`origin 123.36.123.1`
instead of
```
origin
123.36.123.1
```
You can reproduce by doing a telnet to port 43 and sending the payloads
above.
Will fix and re-upload soon
> Create a batch capable pseudo-whois ("netcat") enrichment Processor
> -------------------------------------------------------------------
>
> Key: NIFI-1971
> URL: https://issues.apache.org/jira/browse/NIFI-1971
> Project: Apache NiFi
> Issue Type: Improvement
> Affects Versions: 1.0.0, 0.7.0
> Reporter: Andre
> Assignee: Andre
> Fix For: 1.1.0
>
>
> While the QueryDNS created can be used on low to medium volume enrichment and
> to licensed DNS based lookups (e.g. commercial use of SpamHaus) many
> enrichment providers prefer the use of bulk queries using pseudo whois API
> (a.k.a. netcat interface).
> as documented
> [here|https://www.shadowserver.org/wiki/pmwiki.php/Services/IP-BGP#toc6] the
> bulk interfaces work by connecting to port 43/TCP and sending a payload like:
> {code}
> begin origin
> 4.5.4.3
> 17.112.152.32
> 208.77.188.166
> end
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
