Learn how easy it is to sync an existing GitHub or Google Code repo to a SourceForge project! See Demo

Close

#19 Need graceful error handling

open
nobody
None
5
2012-09-02
2012-09-02
jbc
No

I have an error in sguild.email. When a rule fires that should generate an email alert, sguild hits this mistake and bombs out. I think this should be handled more gracefully with proper error logging. Here is the output:

012-09-02 13:43:34 pid(17014) Sending Email: [2012-09-02 13:23:31] ALERT 3.122473 from jbc-eth0: ET POLICY FTP Login Successful. 192.168.1.72 (kathy-694759590):21 -> 192.168.1.66 (jbc-2.local):48214
Error: error reading "sock22": connection refused
error reading "sock22": connection refused
while executing
"smtp::sendmessage $token -recipients $EMAIL_RCPT_TO -servers $SMTP_SERVER -originator $EMAIL_FROM"
(procedure "EmailEvent" line 37)
invoked from within
"EmailEvent $eventDataList"
(procedure "EventRcvd" line 34)
invoked from within
"EventRcvd [list 0 $priority $class_type $sensorName $timestamp $sid $cid $msg $str_sip $str_dip $ip_proto $src_port $dst_port $sig_gen $sig_id $sig_..."
(procedure "BYEventRcvd" line 99)
invoked from within
"BYEventRcvd sock15 sock6 0 3 122473 jbc-eth0 1 1 {2012-09-02 13:23:31} 1 2003410 9 {ET POLICY FTP Login Successful} {2012-09-02 13:23:31} 3 misc-activ..."
("eval" body line 1)
invoked from within
"eval BYEventRcvd $socketID [lrange $data 1 end] "
(procedure "SensorCmdRcvd" line 39)
invoked from within
"SensorCmdRcvd sock15"
SGUILD: killing child procs...
SGUILD: Exiting...

Discussion