From c9355d7c94a483694a43d7051b916e16571d6543 Mon Sep 17 00:00:00 2001 From: Dan Stevens Date: Wed, 10 Jun 2020 16:10:25 -0500 Subject: [PATCH] Fixing forensic parse failure on valid forensic report --- parsedmarc/__init__.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/parsedmarc/__init__.py b/parsedmarc/__init__.py index 28bc72a..0c102be 100644 --- a/parsedmarc/__init__.py +++ b/parsedmarc/__init__.py @@ -605,7 +605,7 @@ def parse_forensic_report(feedback_report, sample, msg_date, arrival_utc = arrival_utc.strftime("%Y-%m-%d %H:%M:%S") parsed_report["arrival_date_utc"] = arrival_utc - ip_address = parsed_report["source_ip"] + ip_address = re.split('\s', parsed_report["source_ip"]).pop(0) parsed_report_source = get_ip_address_info(ip_address, offline=offline, nameservers=nameservers,