Integrate AlientVault feeds into minemeld

prateekj — Wed, 28 Aug 2019 16:28:22 GMT

I have been trying to add the alienvault otx feeds to minemeld and followed the steps mentioned in:
https://live.paloaltonetworks.com/t5/MineMeld-Discussions/AlienVault-taxii-miner-versus-prebuilt-reputation-data-miner/td-p/157037

However, I get this error while polling:

Any ideas as to what might be failing?

Re: Integrate AlientVault feeds into minemeld

Mragheb — Wed, 05 May 2021 08:38:33 GMT

I have the same issue here, Did anyone figureout a solution

<urlopen error Errno 1_ssl.c:510 errir:140770FC:SSL
routines:SSL23_Get_Server_Hello:Unkown protocol

Re: Integrate AlientVault feeds into minemeld

Mragheb — Wed, 05 May 2021 21:54:08 GMT

2021-05-04T17:50:57 (18963)table._query_by_index INFO: Deleted in scan of _age_out: 0
2021-05-04T17:51:13 (18964)basepoller._huppable_wait INFO: hup is clear: False
2021-05-04T17:51:13 (18964)basepoller._actor_loop INFO: EFG-Alienvault-miner-TAXII - command: 1620150673194 poll
2021-05-04T17:51:13 (18964)basepoller._polling_loop INFO: Polling EFG-Alienvault-miner-TAXII
2021-05-04T17:51:13 (18964)basepoller._poll ERROR: Exception in polling loop for EFG-Alienvault-miner-TAXII: <urlopen error [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol>
Traceback (most recent call last):
File "/opt/minemeld/engine/0.9.52.post1/local/lib/python2.7/site-packages/minemeld/ft/basepoller.py", line 721, in _poll
performed = self._polling_loop()
File "/opt/minemeld/engine/0.9.52.post1/local/lib/python2.7/site-packages/minemeld/ft/basepoller.py", line 571, in _polling_loop
iterator = self._build_iterator(now)
File "/opt/minemeld/engine/0.9.52.post1/local/lib/python2.7/site-packages/minemeld/ft/taxii.py", line 1131, in _build_iterator
self._discover_services(tc)
File "/opt/minemeld/engine/0.9.52.post1/local/lib/python2.7/site-packages/minemeld/ft/taxii.py", line 292, in _discover_services
resp = self._call_taxii_service(self.discovery_service, tc, request)
File "/opt/minemeld/engine/0.9.52.post1/local/lib/python2.7/site-packages/minemeld/ft/taxii.py", line 282, in _call_taxii_service
port=port
File "/opt/minemeld/engine/0.9.52.post1/local/lib/python2.7/site-packages/libtaxii/clients.py", line 337, in call_taxii_service2
response = urllib.request.urlopen(req)
File "/usr/lib/python2.7/urllib2.py", line 127, in urlopen
return _opener.open(url, data, timeout)
File "/usr/lib/python2.7/urllib2.py", line 404, in open
response = self._open(req, data)
File "/usr/lib/python2.7/urllib2.py", line 422, in _open
'_open', req)
File "/usr/lib/python2.7/urllib2.py", line 382, in _call_chain
result = func(*args)
File "/opt/minemeld/engine/0.9.52.post1/local/lib/python2.7/site-packages/libtaxii/clients.py", line 363, in https_open
return self.do_open(self.get_connection, req)
File "/usr/lib/python2.7/urllib2.py", line 1184, in do_open
raise URLError(err)
URLError: <urlopen error [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol>
2021-05-04T17:51:17 (18964)basepoller._polling_loop INFO: Polling EFG-Alienvault-miner-TAXII
2021-05-04T17:51:17 (18964)basepoller._poll ERROR: Exception in polling loop for EFG-Alienvault-miner-TAXII: <urlopen error [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol>
Traceback (most recent call last):
File "/opt/minemeld/engine/0.9.52.post1/local/lib/python2.7/site-packages/minemeld/ft/basepoller.py", line 721, in _poll
performed = self._polling_loop()
File "/opt/minemeld/engine/0.9.52.post1/local/lib/python2.7/site-packages/minemeld/ft/basepoller.py", line 571, in _polling_loop
iterator = self._build_iterator(now)
File "/opt/minemeld/engine/0.9.52.post1/local/lib/python2.7/site-packages/minemeld/ft/taxii.py", line 1131, in _build_iterator
self._discover_services(tc)
File "/opt/minemeld/engine/0.9.52.post1/local/lib/python2.7/site-packages/minemeld/ft/taxii.py", line 292, in _discover_services
resp = self._call_taxii_service(self.discovery_service, tc, request)
File "/opt/minemeld/engine/0.9.52.post1/local/lib/python2.7/site-packages/minemeld/ft/taxii.py", line 282, in _call_taxii_service
port=port
File "/opt/minemeld/engine/0.9.52.post1/local/lib/python2.7/site-packages/libtaxii/clients.py", line 337, in call_taxii_service2
response = urllib.request.urlopen(req)
File "/usr/lib/python2.7/urllib2.py", line 127, in urlopen
return _opener.open(url, data, timeout)
File "/usr/lib/python2.7/urllib2.py", line 404, in open
response = self._open(req, data)
File "/usr/lib/python2.7/urllib2.py", line 422, in _open
'_open', req)
File "/usr/lib/python2.7/urllib2.py", line 382, in _call_chain
result = func(*args)
File "/opt/minemeld/engine/0.9.52.post1/local/lib/python2.7/site-packages/libtaxii/clients.py", line 363, in https_open
return self.do_open(self.get_connection, req)
File "/usr/lib/python2.7/urllib2.py", line 1184, in do_open
raise URLError(err)
URLError: <urlopen error [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol>
2021-05-04T17:51:20 (18964)basepoller._actor_loop INFO: EFG-Alienvault-miner-TAXII - command: 1620150673194 age_out

topic Re: Integrate AlientVault feeds into minemeld in General Topics

Integrate AlientVault feeds into minemeld

Re: Integrate AlientVault feeds into minemeld

Re: Integrate AlientVault feeds into minemeld