Merge pull request #150 from CybercentreCanada/ontology/smtp

bugfix KeyError
CybercentreCanada · Aug 6, 2024 · c5458c4 · c5458c4
2 parents 016ac14 + 94c6e3c
commit c5458c4
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/suricata_/helper.py b/suricata_/helper.py
@@ -272,7 +272,8 @@ def attach_network_connection(data: dict):
                             continue
 
                         if not any(
-                            query["rrname"] == network_part.dns_details.domain for query in record["dns"]["query"]
+                            query["rrname"] == network_part.dns_details.domain
+                            for query in record["dns"].get("query", [])
                         ):
                             # This particular record isn't relevant to the alert
                             continue