If you are using any of the Feeds (Palevo/SpyEye/ZeuS) you'll need to
pay attention to this.

Disable SpyEye and use the ssh console to clear the content of the two
list files:


Code:
--------------------
/var/opt/novell/sentinel/data/map_data/SpyEye_Botnet_Domain_ListData
/var/opt/novell/sentinel/data/map_data/SpyEye_Botnet_ListData
--------------------


SpyEye was discontinued in October last year (see
https://spyeyetracker.abuse.ch/goodbye.html) and if you continue to
"cron" the updates, it will populate the List with corrupted
data...........

***** The result is you'll get HTTP 500 errors when trying to read lists
***** (the REST service fails when trying to list Lists at
/SentinelRESTServices/objects/dyn-list/ which is what SCC calls as the
Apache 302 redirect HTML is put into the List data)


--
-"Also now available in 'G+'
(https://plus.google.com/u/0/112362149544381813153) and 'Website'
(https://www.isam.kiwi/) format".-
------------------------------------------------------------------------
ScorpionSting's Profile: https://forums.netiq.com/member.php?userid=469
View this thread: https://forums.netiq.com/showthread.php?t=52781