prbinu / dmarc-report-processor Goto Github PK

Hi, I am getting the below error on a new install of this:

``
perl bin/imap-client.py -s -p 993 -u dmarc -f inbox -c /etc/pki/tls/certs/ca-

bundle.crt -o /tmp
Password:
Traceback (most recent call last):
File "bin/imap-client.py", line 158, in
main()
File "bin/imap-client.py", line 139, in main
mail.login(args.user, args.pwd)
File "/usr/lib64/python2.7/imaplib.py", line 517, in login
typ, dat = self._simple_command('LOGIN', user, self._quote(password))
File "/usr/lib64/python2.7/imaplib.py", line 1082, in _simple_command
return self._command_complete(name, self._command(name, *args))
File "/usr/lib64/python2.7/imaplib.py", line 911, in _command_complete
raise self.abort('command: %s => %s' % (name, val))
imaplib.abort: command: LOGIN => socket error: EOF
``

How to make connection on default port 143 ?

In dmarc-convertor.sh "files" variable is coded to only *.zip.

Change
files=( "${ATTACH}/${ydate}"/*.zip )
to
files=( "${ATTACH}/${ydate}"/* )
and it will work on both.

I can't work out how to get a CSV output from the script. All I get a log files. Help please :)

Hi I have been trying to get this to work, by running dmarc-convertor, but running into errors saying:
Step 1: Fetch dmarc reports from mailbox

usage: imap-client.py [-h] [-v] [--attachmentsonly] [--disablereadonly]
[--quiet] -s HOST [-p PORT] -c CACERTS -u USER -f FOLDER
-o OUTDIR [-S SEARCH] [-P PWDFILE]
imap-client.py: error: argument -f/--folder: expected one argument
Error: imap-client mail attachment fetch failed; exiting ...

Hi, just came across this tool. Is this usable for Forensic report emails? So will it open the failed DMARC email attachment found in the forensic report and then parse the XML so it can be queried in splunk?

I know this is not an issue, just didnt know where else to post this question.