<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Minemeld crash once in a while in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/minemeld-crash-once-in-a-while/m-p/327375#M95637</link>
    <description>&lt;P&gt;HI,&lt;/P&gt;&lt;P&gt;My Minemeld is running in a docker container. It consumes memory as much as possible.&amp;nbsp; Now the server is configured with 32 GB memory, still 100% usage by Minemeld. It crashes every a couple of days. The requested url for feed gets internal error. I have to restart the container to fix it.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;We are processing lots of indicators. Total number is 2 million.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Any idea how to properly configure the app or suggestion for sizing?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Mon, 11 May 2020 17:40:15 GMT</pubDate>
    <dc:creator>yguo29</dc:creator>
    <dc:date>2020-05-11T17:40:15Z</dc:date>
    <item>
      <title>Minemeld crash once in a while</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/minemeld-crash-once-in-a-while/m-p/327375#M95637</link>
      <description>&lt;P&gt;HI,&lt;/P&gt;&lt;P&gt;My Minemeld is running in a docker container. It consumes memory as much as possible.&amp;nbsp; Now the server is configured with 32 GB memory, still 100% usage by Minemeld. It crashes every a couple of days. The requested url for feed gets internal error. I have to restart the container to fix it.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;We are processing lots of indicators. Total number is 2 million.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Any idea how to properly configure the app or suggestion for sizing?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 11 May 2020 17:40:15 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/minemeld-crash-once-in-a-while/m-p/327375#M95637</guid>
      <dc:creator>yguo29</dc:creator>
      <dc:date>2020-05-11T17:40:15Z</dc:date>
    </item>
    <item>
      <title>Re: Minemeld crash once in a while a</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/minemeld-crash-once-in-a-while/m-p/329765#M95640</link>
      <description>&lt;P&gt;I had the same issue on&amp;nbsp; a ubuntu 18.04 installation, with minemeld installed by package ( following this guide&amp;nbsp; &lt;A href="https://live.paloaltonetworks.com/t5/minemeld-articles/manually-install-minemeld-on-ubuntu-16-04/ta-p/253336" target="_self"&gt;Manually Install MineMeld on Ubuntu 16.04&amp;nbsp; ).&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;On &lt;STRONG&gt;dmesg &lt;/STRONG&gt;logs I foud&amp;nbsp; a &lt;STRONG&gt;segfault&lt;/STRONG&gt; crash :&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-SPOILER&gt;&lt;FONT size="3" face="terminal,monaco"&gt;[629369.655024] mm-traced[13626]: segfault at 2ce5 ip 00007f70920e613d sp 00007ffd009b6cb8 error 4 in libleveldb.so.1.20[7f70920c3000+5a000]&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT size="3" face="terminal,monaco"&gt;[629370.822671] mm-traced[13680]: segfault at 2ce5 ip 00007fb8c887113d sp 00007ffd4fcab598 error 4 in libleveldb.so.1.20[7fb8c884e000+5a000]&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT size="3" face="terminal,monaco"&gt;[629419.269495] mm-run[13690]: segfault at 655e ip 00007f5fddd7213d sp 00007f5fd76fd828 error 4 in libleveldb.so.1.20[7f5fddd4f000+5a000]&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT size="3" face="terminal,monaco"&gt;[629420.710727] mm-traced[13685]: segfault at 2ce5 ip 00007f895010e13d sp 00007ffeec3e3868 error 4 in libleveldb.so.1.20[7f89500eb000+5a000]&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT size="3" face="terminal,monaco"&gt;[631226.662338] mm-traced[13693]: segfault at 2ce5 ip 00007f161f92113d sp 00007fff42889188 error 4 in libleveldb.so.1.20[7f161f8fe000+5a000]&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT size="3" face="terminal,monaco"&gt;[631845.671715] mm-traced[13706]: segfault at 2ce5 ip 00007f5728ef113d sp 00007ffd2292dd08 error 4 in &lt;STRONG&gt;libleveldb.so.1.20&lt;/STRONG&gt;[7f5728ece000+5a000]&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT size="3" face="terminal,monaco"&gt;[649628.510422] mm-traced[13712]: segfault at 200000 ip 00007ff429dbe31a sp 00007ffd953acb00 error 4 in &lt;STRONG&gt;_plyvel.so&lt;/STRONG&gt;[7ff429da9000+27000]&lt;/FONT&gt;&lt;/LI-SPOILER&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Googling I have found that someone had the same issue and solved &lt;STRONG&gt;downgrading libleveldb to version 1.18&lt;/STRONG&gt;.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I tried it and I solved the problem&amp;nbsp; with the steps below :&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;download libleveldb v.1.18 from&amp;nbsp; official repo&amp;nbsp; &lt;STRONG&gt;&lt;A href="https://github.com/google/leveldb/releases/tag/v1.18" target="_blank"&gt;https://github.com/google/leveldb/releases/tag/v1.18&lt;/A&gt;&amp;nbsp;&amp;nbsp; ;&lt;/STRONG&gt;&lt;/LI&gt;&lt;LI&gt;compile &lt;FONT size="3" face="terminal,monaco"&gt;&lt;STRONG&gt;libleveldb.so.1.18 &lt;/STRONG&gt;and copy it to /usr/local/lib&amp;nbsp; :&lt;/FONT&gt; &lt;LI-SPOILER&gt;tar xzvf leveldb-1.18.tar.gz&lt;BR /&gt;&lt;BR /&gt;cd leveldb-1.18&lt;BR /&gt;&lt;BR /&gt;make&lt;BR /&gt;&lt;BR /&gt;&amp;nbsp;cp libleveldb.so.1.18 /usr/lib/x86_64-linux-gnu/&lt;BR /&gt;&lt;BR /&gt;cp -r leveldb /usr/local/include&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/LI-SPOILER&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="3" face="terminal,monaco"&gt;At this point I updated all the symlink to point to &lt;STRONG&gt;libleveldb.so.1.18&lt;/STRONG&gt; instead of &lt;STRONG&gt;libleveldb.so.1.20, &lt;/STRONG&gt;but after performing the &lt;STRONG&gt;ldconfig &lt;/STRONG&gt;command , they changed back to &lt;STRONG&gt;libleveldb.so.1.20&lt;/STRONG&gt; .&lt;/FONT&gt;&lt;FONT size="3" face="terminal,monaco"&gt;So, I did a bad thing&amp;nbsp; : &lt;/FONT&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;LI-SPOILER&gt;cp /usr/lib/x86_64-linux-gnu/libleveldb.so.1.20 /usr/lib/x86_64-linux-gnu/libleveldb.so.1.20.backup&lt;BR /&gt;&lt;BR /&gt;cp /usr/lib/x86_64-linux-gnu/libleveldb.so.1.18 usr/lib/x86_64-linux-gnu/libleveldb.so.1.20&lt;/LI-SPOILER&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;FONT size="3" face="terminal,monaco"&gt;I know it is an inelegant workaround but after a restart of the service ( better a reboot ) everything works fine and minemeld did not crash any more .&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Maybe the container you are using has been updated and some libraries conflicts with other libraries inside minemeld .&lt;/P&gt;&lt;P&gt;In my case the conflict was betweend these 2 :&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-SPOILER&gt;/usr/lib/x86_64-linux-gnu/libleveldb.so.1.20&lt;BR /&gt;/opt/minemeld/engine/0.9.70/lib/python2.7/site-packages/plyvel/_plyvel.so&lt;BR /&gt;&lt;BR /&gt;&lt;/LI-SPOILER&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Ciao,&lt;/P&gt;&lt;P&gt;Daniele&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 25 May 2020 17:23:49 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/minemeld-crash-once-in-a-while/m-p/329765#M95640</guid>
      <dc:creator>DanieleDenisi</dc:creator>
      <dc:date>2020-05-25T17:23:49Z</dc:date>
    </item>
    <item>
      <title>Re: Minemeld crash once in a while</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/minemeld-crash-once-in-a-while/m-p/330040#M95641</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;I had the same problem in an installation of minemeld on ubuntu 18.04 ( from package following&amp;nbsp; &lt;A title="minemeldinstallguide" href="https://live.paloaltonetworks.com/t5/minemeld-articles/manually-install-minemeld-on-ubuntu-16-04/ta-p/253336" target="_self"&gt;this guide&lt;/A&gt;&amp;nbsp; ).&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Looking on &lt;STRONG&gt;dmesg&lt;/STRONG&gt; logs I found the&amp;nbsp; errors below:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;[627512.663356] mm-traced[13568]: segfault at 2ce5 ip 00007f52c4bba13d sp 00007ffe0a5d4278 error 4 in libleveldb.so.1.20[7f52c4b97000+5a000]
[627514.503022] mm-traced[13621]: segfault at 2ce5 ip 00007f5df770713d sp 00007ffe423cfd18 error 4 in libleveldb.so.1.20[7f5df76e4000+5a000]
[629369.655024] mm-traced[13626]: segfault at 2ce5 ip 00007f70920e613d sp 00007ffd009b6cb8 error 4 in libleveldb.so.1.20[7f70920c3000+5a000]
[629370.822671] mm-traced[13680]: segfault at 2ce5 ip 00007fb8c887113d sp 00007ffd4fcab598 error 4 in libleveldb.so.1.20[7fb8c884e000+5a000]
[629419.269495] mm-run[13690]: segfault at 655e ip 00007f5fddd7213d sp 00007f5fd76fd828 error 4 in libleveldb.so.1.20[7f5fddd4f000+5a000]
[629420.710727] mm-traced[13685]: segfault at 2ce5 ip 00007f895010e13d sp 00007ffeec3e3868 error 4 in libleveldb.so.1.20[7f89500eb000+5a000]
[631226.662338] mm-traced[13693]: segfault at 2ce5 ip 00007f161f92113d sp 00007fff42889188 error 4 in libleveldb.so.1.20[7f161f8fe000+5a000]
[631845.671715] mm-traced[13706]: segfault at 2ce5 ip 00007f5728ef113d sp 00007ffd2292dd08 error 4 in libleveldb.so.1.20[7f5728ece000+5a000]
[649628.510422] mm-traced[13712]: segfault at 200000 ip 00007ff429dbe31a sp 00007ffd953acb00 error 4 in _plyvel.so[7ff429da9000+27000]
[660212.351922] SGI XFS with ACLs, security attributes, realtime, no debug enabled&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Googling I found that someone had the same problem caused by an incompatibility between libleveldb.so.1.20 and _plyvel.so&amp;nbsp; and&lt;/P&gt;&lt;P&gt;downgrading to&amp;nbsp; libdevel to 1.18&amp;nbsp; solved the problem.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I tried it with success and now minemeld works smootly.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I foolwed the steps below :&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;download libdevel 1.18 from &lt;A href="https://github.com/google/leveldb/releases/tag/v1.18" target="_blank"&gt;https://github.com/google/leveldb/releases/tag/v1.18&lt;/A&gt;&lt;/LI&gt;&lt;LI&gt;cd leveldb-1.18&lt;/LI&gt;&lt;LI&gt;make&lt;/LI&gt;&lt;LI&gt;cp libleveldb.so.1.18 /usr/lib/x86_64-linux-gnu/&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;At this point I updated sym link to point to &lt;STRONG&gt;libleveldb.so.1.18&lt;/STRONG&gt; instead of libleveldb.so.1.20 and issued&amp;nbsp; &lt;STRONG&gt;ldconfig &lt;/STRONG&gt;command.&lt;/P&gt;&lt;P&gt;But after&amp;nbsp; this , the symlink pointed back to libdevel.so.1.20.&amp;nbsp;&lt;/P&gt;&lt;P&gt;So I did a bad thing :&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp; cp /usr/lib/x86_64-linux-gnu/libleveldb.so.1.18 /usr/lib/x86_64-linux-gnu/libleveldb.so.1.20.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;It is a &lt;STRONG&gt;very inelegant&lt;/STRONG&gt; work around but It solved.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;After a restart of minemeld , better a reboot, now everything works fine.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 27 May 2020 09:13:18 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/minemeld-crash-once-in-a-while/m-p/330040#M95641</guid>
      <dc:creator>DanieleDenisi</dc:creator>
      <dc:date>2020-05-27T09:13:18Z</dc:date>
    </item>
  </channel>
</rss>

