This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Mattk
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Mattk
02-08-2023
13Posts
2Likes
0Solutions
Feb 08, 2023Last Visited
User
Activity
User
Profile
Latest posts by Mattk
| Subject | Views | Posted |
|---|---|---|
| 4193 | 08-15-2019 03:09 PM | |
| 4234 | 08-13-2019 02:13 PM | |
| 1846 | 06-18-2019 01:03 PM | |
| 8682 | 05-09-2019 07:32 AM | |
| 8723 | 05-06-2019 08:19 AM | |
| 9233 | 05-03-2019 02:31 PM | |
| 3692 | 04-30-2019 04:30 PM | |
| 3879 | 04-26-2019 09:35 AM | |
| 4042 | 04-26-2019 09:18 AM | |
| 9980 | 03-18-2015 12:26 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 05-03-2019 02:31 PM | |
| 1 Like | 04-26-2019 09:18 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 6 Likes | |||
| 6 Likes | |||
| 1 Like | |||
| 1 Like | |||
| 2 Likes |
User Badges
Community Statistics
| Member Since | 01-16-2015 09:40 AM |
| Date Last Visited | 02-08-2023 05:21 PM |
| Posts | 13 |
| Total Likes Received | 2 |
08-13-2019
02:13 PM
I am trying to pull the complete list from URLHaus (https://urlhaus.abuse.ch/api/) and specificly the CSV feed. (https://urlhaus.abuse.ch/downloads/csv/)
The problem is this. The feed is huge! Over 200k right now, so the PAN will not take it because of it's limits.
I noticed that most of these URL's are marked offline. So there are less than 5k of them on line. This is good.
My problem is this. How do I get a miner to only grab the online URL's? Has anyone else done this?
... View more
06-18-2019
01:03 PM
I have a working OVA of MineMeld installed on Ubuntu 18.04 server. One of the guys here where I work put in a ton of hours getting it installed and working. Is anyone interested in getting a copy.
If so does anyone know a good repository to put it?
... View more
05-06-2019
08:19 AM
So no replys yet, but I gathered this from the MineMeld-web.log
[2019-05-06 08:13:21 +0000] [16654] [INFO] Starting gunicorn 19.5.0 [2019-05-06 08:13:21 +0000] [16654] [ERROR] Connection in use: ('127.0.0.1', 5000) [2019-05-06 08:13:21 +0000] [16654] [ERROR] Retrying in 1 second. [2019-05-06 08:13:22 +0000] [16654] [ERROR] Connection in use: ('127.0.0.1', 5000) [2019-05-06 08:13:22 +0000] [16654] [ERROR] Retrying in 1 second. [2019-05-06 08:13:23 +0000] [16654] [ERROR] Connection in use: ('127.0.0.1', 5000) [2019-05-06 08:13:23 +0000] [16654] [ERROR] Retrying in 1 second. [2019-05-06 08:13:24 +0000] [16654] [ERROR] Connection in use: ('127.0.0.1', 5000) [2019-05-06 08:13:24 +0000] [16654] [ERROR] Retrying in 1 second. [2019-05-06 08:13:25 +0000] [16654] [ERROR] Connection in use: ('127.0.0.1', 5000) [2019-05-06 08:13:25 +0000] [16654] [ERROR] Retrying in 1 second. [2019-05-06 08:13:26 +0000] [16654] [ERROR] Can't connect to ('127.0.0.1', 5000) [2019-05-06 08:13:27 +0000] [16658] [INFO] Starting gunicorn 19.5.0 [2019-05-06 08:13:27 +0000] [16658] [ERROR] Connection in use: ('127.0.0.1', 5000) [2019-05-06 08:13:27 +0000] [16658] [ERROR] Retrying in 1 second. [2019-05-06 08:13:28 +0000] [16658] [ERROR] Connection in use: ('127.0.0.1', 5000) [2019-05-06 08:13:28 +0000] [16658] [ERROR] Retrying in 1 second.
Does this help anyone?
... View more
05-03-2019
02:31 PM
1 Kudo
I have just instaled MM on Ubunto 16.04. Using these instructions:
Howto on Ubuntu 16.04
$ sudo apt-get update
$ sudo apt-get upgrade
$ sudo apt-get install -y gcc git python-minimal python2.7-dev libffi-dev libssl-dev make
$ wget https://bootstrap.pypa.io/get-pip.py
$ sudo -H python get-pip.py
$ sudo -H pip install ansible
$ git clone https://github.com/PaloAltoNetworks/minemeld-ansible.git
$ cd minemeld-ansible
$ ansible-playbook -K -i 127.0.0.1, local.yml
$ usermod -a -G minemeld <your user> # add your user to minemeld group, useful for development
It appears to be running and the web interface comes up.
When I try to login using ether admin:minemend or my user:password the login times out. "error checking credintals : Timeout"
I tried to follow these instructions to fix this:
https://live.paloaltonetworks.com/t5/MineMeld-Discussions/New-minemeld-deploy-unable-to-login-to-GUI/td-p/211171
sudo service minemeld stop
sudo -H -u minemeld /opt/minemeld/engine/current/bin/pip install pip==9.0.3
sudo service minemeld start
This didn't fix the problem ether.
Any ideas on how to fix this?
... View more
04-30-2019
04:30 PM
It seem the A record showed up today. Now I am stuck this step.
8. Checking if MineMeld is running
Check if the 3 MineMeld services are up and running:
$ sudo -u minemeld /opt/minemeld/engine/current/bin/supervisorctl -c /opt/minemeld/local/supervisor/config/supervisord.conf status minemeld-engine RUNNING pid 3727, uptime 0:08:50 minemeld-traced RUNNING pid 3728, uptime 0:08:50 minemeld-web RUNNING pid 3729, uptime 0:08:50 minemeld-supervisord-listener RUNNING pid 3730, uptime 0:08:50
It is not running. In fact it seem it really didn't install compleatly. There is no path past /opt/minemeld/engine/
I'm not sure what to do from here.
... View more
04-26-2019
09:35 AM
Looks like I can't resolve minemeld-update.panw.io
I also went to the internets and tried to have other sites resolve it.
Is it down. said its down.
Ultratools site says
minemeld-update.panw.io has no A records
Did I type something wrong?
... View more
04-26-2019
09:18 AM
1 Kudo
I am trying to follow the directions found here:
https://live.paloaltonetworks.com/t5/MineMeld-Articles/Manually-install-MineMeld-on-Ubuntu-Server-16-04/ta-p/253336
I get to this step
Adding the repo GPG key
Add the MineMeld repo GPG key to the APT trusted keyring:
wget -qO - https://minemeld-updates.panw.io/gpg.key | sudo apt-key add –
Which seems to fail out on me:
So I’m just not sure what to do from here.
Anyone have some ideas?
... View more
03-18-2015
12:26 PM
So if I understand what you are saying. Use the traffic logs to identify the MS Update server IP Addresses and then have the system not decrypt traffic to those IP's. Is that correct?
... View more
03-18-2015
12:04 PM
I saw that, but I see no where in the decryption rules where I can exclude based on Application ID. Where would I locate that?
... View more
03-18-2015
09:44 AM
We are having a problem with MS update and SSL decryption. Currently when a windows machine goes out to get its updates it fails. This appears to be because of the SSL decryption. I tested this by excluding one PC from encryption and it worked just fine. So my question is what are other Administrators doing to allow MS Updates to by-pass encryption?
... View more
Labels:
- Labels:
-
App-ID
-
Configuration
-
Troubleshooting
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks