This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About ACMENEWS
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About ACMENEWS
10-22-2019
7Posts
0Likes
0Solutions
Oct 22, 2019Last Visited
User
Activity
User
Profile
Latest posts by ACMENEWS
| Subject | Views | Posted |
|---|---|---|
| 2548 | 10-11-2019 09:42 AM | |
| 2449 | 10-10-2019 10:51 AM | |
| 52839 | 10-07-2019 04:26 PM | |
| 2382 | 09-03-2019 07:12 PM | |
| 101530 | 09-03-2019 06:49 PM | |
| 4509 | 09-03-2019 04:57 PM | |
| 101673 | 09-02-2019 12:53 PM |
User Badges
Community Statistics
| Member Since | 09-02-2019 12:50 PM |
| Date Last Visited | 10-22-2019 10:51 PM |
| Posts | 7 |
10-11-2019
09:42 AM
For what it is worth, it can be made to work. ProofPoint TRAP has a few issues. You will need to build trust on TRAP of the MineMeld root CA (trust the certificate), set TRAP to poll at 1 hour, not 1 minute, or you will periodically consume all RAM within TRAP and then TRAP will fail. TRAP will stop polling with no indication that it has failed. The feeds will have green icons indicating feeds are updating, though the logs clearly show no activity. This requires watching and rebooting TRAP. I don 't currently have access to the TRAP box. If I did, I'd share the config. One thing that was more stable was to create an output feed in MineMeld that was a simple HTTP plain text output feed. TRAP appeared to handle that type of a feed with less issues.
... View more
10-10-2019
10:51 AM
I have MineMeld setup to poll my IBM X-Force TAXII feed, however no indicators are being retrieved. At this point, I simply want indicators from a specific X-Force collection to feed into a mirror copy within MineMeld. The collection has indicators. I have added a large number of indicators just a few minutes ago. Re-polling the feed results in no new indicators within MineMeld. I have had this working before in a prior version of MineMeld at a site that I no longer have access to, thus I cannot reference that configuration. This should be simple. What am I doing wrong? Thank you. CLASS minemeld.ft.taxii2.Taxii2Client STATE STARTED AUTH TYPE basic USERNAME 1dafa470-4759-4fba-rest-removed PASSWORD removed DISCOVERY SERVICE URL https://api.xforce.ibmcloud.com/taxii API ROOT https://api.xforce.ibmcloud.com/xfti COLLECTION ID c57f51a9b86ad7bb53c9restRemoved VERIFY SERVER CERT yes ENABLED yes LAST RUN 2019-10-10 12:03:05 -0500 SUCCESS # INDICATORS 0
... View more
10-07-2019
04:26 PM
Thank you to Ksampson and Lmori. Following the provided instructions I was able to install MimeMeld within Ubuntu 18.04.1 LTS and have it properly function. I have been attempting to replace my Ubuntu 14.x MineMeld install and these were the only instructions which actually worked.
... View more
09-03-2019
07:12 PM
I have supported Palo Alto Networks firewalls since the 3.x days. I currently support many of these firewalls, many including HA with all of the licensed features, linked to Panorama, Minemeld and other products. I desire a lab setup so that I can test various settings and changes prior to deployment. For example, SSL Decryption being enable or disabled can cause serious caching issues which I will not go into here. I'd rather play with these settings in a lab until I get it right, then deploy those settings to my devices. What is the most cost efficient way to setup such a lab? Should I look at a bottom of the line device which appears to run over $1000.00 with licenses and support, or is there a better option? Thank you, Edwin Davidson
... View more
09-03-2019
06:49 PM
FWIW, I followed the instructions provided by Lmori on Ubuntu 18.04.3 LTS server, patched with the latest updates as of the time of this post. After the reboot, MineMeld was not listed as a service. I reran the following at which point MineMeld was installed as a service. sudo apt install -o Dpkg::Options::="--force-overwrite" -y minemeld I browsed to the server on port 443 and was presented with a login to MineMeld. I login as admin/minemeld but received "Bad Gateway". The log files show the following, which are the same as logs others have posted: [2019-09-04 01:18:17 +0000] [3499] [ERROR] Exception in worker process
Traceback (most recent call last):
File "/opt/minemeld/engine/0.9.62/local/lib/python2.7/site-packages/gunicorn/arbiter.py", line 517, in spawn_worker
worker.init_process()
File "/opt/minemeld/engine/0.9.62/local/lib/python2.7/site-packages/gunicorn/workers/ggevent.py", line 190, in init_process
super(GeventWorker, self).init_process()
File "/opt/minemeld/engine/0.9.62/local/lib/python2.7/site-packages/gunicorn/workers/base.py", line 122, in init_process
self.load_wsgi()
File "/opt/minemeld/engine/0.9.62/local/lib/python2.7/site-packages/gunicorn/workers/base.py", line 132, in load_wsgi
self.wsgi = self.app.wsgi()
File "/opt/minemeld/engine/0.9.62/local/lib/python2.7/site-packages/gunicorn/app/base.py", line 67, in wsgi
self.callable = self.load()
File "/opt/minemeld/engine/0.9.62/local/lib/python2.7/site-packages/gunicorn/app/wsgiapp.py", line 65, in load
return self.load_wsgiapp()
File "/opt/minemeld/engine/0.9.62/local/lib/python2.7/site-packages/gunicorn/app/wsgiapp.py", line 52, in load_wsgiapp
return util.import_app(self.app_uri)
File "/opt/minemeld/engine/0.9.62/local/lib/python2.7/site-packages/gunicorn/util.py", line 357, in import_app
__import__(module)
File "/opt/minemeld/engine/0.9.62/local/lib/python2.7/site-packages/minemeld/flask/main.py", line 3, in <module>
app = create_app()
File "/opt/minemeld/engine/0.9.62/local/lib/python2.7/site-packages/minemeld/flask/__init__.py", line 67, in create_app
from . import metricsapi # noqa
File "/opt/minemeld/engine/0.9.62/local/lib/python2.7/site-packages/minemeld/flask/metricsapi.py", line 19, in <module>
import rrdtool
ImportError: librrd.so.4: cannot open shared object file: No such file or directory
[2019-09-04 01:18:17 +0000] [3499] [INFO] Worker exiting (pid: 3499)
[2019-09-04 01:18:17 +0000] [3496] [INFO] Shutting down: Master
[2019-09-04 01:18:17 +0000] [3496] [INFO] Reason: Worker failed to boot. I have found many posts about this issue, yet no solutions. rrdtool itself does exist in the minemeld folder. Any advice? Thank you.
... View more
09-03-2019
04:57 PM
The provided link no longer works. Actually, it looks to be invalid and the text of the link does not appear to match the link itself.
... View more
09-02-2019
12:53 PM
Currently, Ubuntu 19.x is the server version while LTS is at 18.x. Are there instructions for installing MineMeld on current Ubuntu releases? Thank you. Reference: https://ubuntu.com/download/server
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
10-22-2019
10:51 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks