anti/DECNET
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(clustering): filter extra fp keys before splatting into update_identity_fingerprints

Browse Source
This commit is contained in:
anti
2026-05-10 04:51:49 -04:00
parent 92f43b4655
commit c2693aafc3
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
decnet/clustering/impl/connected_components.py
View File

@@ -363,8 +363,9 @@ async def _roll_up_fingerprints(
breaks the clusterer tick — the columns just stay stale until the breaks the clusterer tick — the columns just stay stale until the
next pass.""" next pass."""
summaries = extract_fp_summaries(member_rows) summaries = extract_fp_summaries(member_rows)
fp_kwargs = {k: v for k, v in summaries.items() if k in {"ja3_hashes", "hassh_hashes", "tls_cert_sha256"}}
try: try:
await repo.update_identity_fingerprints(identity_uuid, **summaries) await repo.update_identity_fingerprints(identity_uuid, **fp_kwargs)
except Exception: # noqa: BLE001 except Exception: # noqa: BLE001
log.exception( log.exception(
"clusterer: failed to roll up fingerprints for identity=%s", "clusterer: failed to roll up fingerprints for identity=%s",