topic Re: Wrong IP calculation after Whitelisting on MineMeld in General Topics

Wrong IP calculation after Whitelisting on MineMeld

StamL — Thu, 27 Sep 2018 09:20:26 GMT

Hi,

I have installed MineMeld and it works fine. Before creating our configuration I wanted to test something on Whitelisting as it is going to help on what we are aiming to do with MineMeld. I hope the below finding is a configuration mistake or something i have missed and not an issue in MineMeld.

Simple when i whitelist two IP from a subnet /24 or any subnet the output misses IPs

i whitelisted as an example 181.215.39.10 && 181.215.39.24 . any two+ IP will trigger the below issue in any subnet .

As you can see it has taken 10 out and 24 but has not included 11 - 23 wich is an issue.

181.215.39.0-181.215.39.9
181.215.39.25-181.215.39.255

Can you please confirm this behaviour .

Re: Wrong IP calculation after Whitelisting on MineMeld

lmori — Fri, 28 Sep 2018 09:17:44 GMT

Thanks @StamL, this has been fixed with PR #297: https://github.com/PaloAltoNetworks/minemeld-core/pull/297

Re: Wrong IP calculation after Whitelisting on MineMeld

StamL — Fri, 28 Sep 2018 09:41:14 GMT

Thank you @lmori for your prompt response and fix. I have installed via ansible in CentOS 7 - to share the good experience had to amend the CentOS-7-post.yml file due to missing some packages , worked as treat nice work :-).

ON that, do i have to resinstall to get the update can you please advice ( i have no data yet so thats no issue) .

Thank you

Stam

Re: Wrong IP calculation after Whitelisting on MineMeld

AntonZakharov — Wed, 03 Oct 2018 20:44:19 GMT

Imori, thank you so much for this fix!