About iThreatHunt

Please update minemeld-cef output for supporting hash value (MD5,SHA1,SHA256). ... View more

I need this feature too. Please update minemeld-cef output for supporting hash value (MD5,SHA1,SHA256). ... View more

Can not upgrade to 0.9.50   /opt/minemeld/log# sudo /usr/sbin/minemeld-auto-update 2018-10-17 12:04:28,873 INFO:0.9.11 Current status: 2018-10-17 12:04:28,873 INFO:0.9.11 minemeld-engine: current: 0.9.44 latest: 0.9.44 2018-10-17 12:04:28,874 INFO:0.9.11 minemeld-webui: current: 0.9.44 latest: 0.9.44 2018-10-17 12:04:28,874 INFO:0.9.11 minemeld-prototypes: current: 0.9.44 latest: 0.9.44 2018-10-17 12:04:29,023 DEBUG:0.9.11 curl output: 2018-10-17 12:04:29,113 DEBUG:0.9.11 curl output: 2018-10-17 12:04:29,113 DEBUG:0.9.11 gpgv: /usr/bin/gpgv --ignore-time-conflict --keyring /etc/apt/trusted.gpg --keyring /etc/apt/trusted.gpg.d/minemeld.gpg /tmp/mmaupackagesgpgUlquCA /tmp/mmaupackagesLFlVWK 2018-10-17 12:04:29,123 INFO:0.9.11 gpgv output: gpgv: Signature made Fri 27 Jul 2018 09:20:38 PM ICT using RSA key ID 7B630999 gpgv: Good signature from "Palo Alto Networks, MineMeld Team <minemeld@paloaltonetworks.com>" gpgv: aka "[invalid image]" 2018-10-17 12:04:29,136 INFO:0.9.11 Marking minemeld-engine 0.9.50.post1 for deployment 2018-10-17 12:04:29,136 INFO:0.9.11 Marking minemeld-webui 0.9.50 for deployment 2018-10-17 12:04:29,137 INFO:0.9.11 Marking minemeld-prototypes 0.9.50 for deployment 2018-10-17 12:04:29,137 INFO:0.9.11 Space available on /opt/minemeld device: 8287468KB 2018-10-17 12:04:29,137 INFO:0.9.11 Downloading package minemeld-engine version 0.9.50.post1 from http://minemeld-updates.panw.io/stage2/0_9/minemeld-core-0.9.50.post1-linux-x86_64.tar.gz 2018-10-17 12:04:29,928 DEBUG:0.9.11 curl output: 2018-10-17 12:04:29,928 INFO:0.9.11 Package minemeld-engine version 0.9.50.post1 downloaded in /tmp/minemeld-engineJ6W1bg 2018-10-17 12:04:30,828 INFO:0.9.11 New extensions frigidaire created Setting up virtualenv New python executable in /opt/minemeld/engine/0.9.50.post1/bin/python Installing setuptools, pip, wheel... Complete output from command /opt/minemeld/engine/0.9.50.post1/bin/python - setuptools pip wheel: Looking in links: /tmp/minemeld-engine0AUDIZ/data Collecting setuptools /tmp/minemeld-engine0AUDIZ/data/pip-18.0-py2.py3-none-any.whl/pip/_vendor/urllib3/util/ssl_.py:369: SNIMissingWarning: An HTTPS request has been made, but the SNI (Server Name Indication) extension to TLS is not available on this platform. This may cause the server to present an incorrect TLS certificate, which can cause validation failures. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings /tmp/minemeld-engine0AUDIZ/data/pip-18.0-py2.py3-none-any.whl/pip/_vendor/urllib3/util/ssl_.py:160: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings /tmp/minemeld-engine0AUDIZ/data/pip-18.0-py2.py3-none-any.whl/pip/_vendor/urllib3/util/ssl_.py:160: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', error(104, 'Connection reset by peer'))': /packages/96/06/c8ee69628191285ddddffb277bd5abdf769166e7a14b867c2a172f0175b1/setuptools-40.4.3-py2.py3-none-any.whl /tmp/minemeld-engine0AUDIZ/data/pip-18.0-py2.py3-none-any.whl/pip/_vendor/urllib3/util/ssl_.py:160: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', error(104, 'Connection reset by peer'))': /packages/96/06/c8ee69628191285ddddffb277bd5abdf769166e7a14b867c2a172f0175b1/setuptools-40.4.3-py2.py3-none-any.whl /tmp/minemeld-engine0AUDIZ/data/pip-18.0-py2.py3-none-any.whl/pip/_vendor/urllib3/util/ssl_.py:160: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', error(104, 'Connection reset by peer'))': /packages/96/06/c8ee69628191285ddddffb277bd5abdf769166e7a14b867c2a172f0175b1/setuptools-40.4.3-py2.py3-none-any.whl /tmp/minemeld-engine0AUDIZ/data/pip-18.0-py2.py3-none-any.whl/pip/_vendor/urllib3/util/ssl_.py:160: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', error(104, 'Connection reset by peer'))': /packages/96/06/c8ee69628191285ddddffb277bd5abdf769166e7a14b867c2a172f0175b1/setuptools-40.4.3-py2.py3-none-any.whl /tmp/minemeld-engine0AUDIZ/data/pip-18.0-py2.py3-none-any.whl/pip/_vendor/urllib3/util/ssl_.py:160: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProtocolError('Connection aborted.', error(104, 'Connection reset by peer'))': /packages/96/06/c8ee69628191285ddddffb277bd5abdf769166e7a14b867c2a172f0175b1/setuptools-40.4.3-py2.py3-none-any.whl /tmp/minemeld-engine0AUDIZ/data/pip-18.0-py2.py3-none-any.whl/pip/_vendor/urllib3/util/ssl_.py:160: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings Could not install packages due to an EnvironmentError: HTTPSConnectionPool(host='files.pythonhosted.org', port=443): Max retries exceeded with url: /packages/96/06/c8ee69628191285ddddffb277bd5abdf769166e7a14b867c2a172f0175b1/setuptools-40.4.3-py2.py3-none-any.whl (Caused by ProtocolError('Connection aborted.', error(104, 'Connection reset by peer'))) ---------------------------------------- ...Installing setuptools, pip, wheel...done. Traceback (most recent call last): File "/tmp/minemeld-engine0AUDIZ/data/virtualenv.py", line 2343, in <module> main() File "/tmp/minemeld-engine0AUDIZ/data/virtualenv.py", line 712, in main symlink=options.symlink) File "/tmp/minemeld-engine0AUDIZ/data/virtualenv.py", line 947, in create_environment download=download, File "/tmp/minemeld-engine0AUDIZ/data/virtualenv.py", line 904, in install_wheel call_subprocess(cmd, show_stdout=False, extra_env=env, stdin=SCRIPT) File "/tmp/minemeld-engine0AUDIZ/data/virtualenv.py", line 796, in call_subprocess % (cmd_desc, proc.returncode)) OSError: Command /opt/minemeld/engine/0.9.50.post1/bin/python - setuptools pip wheel failed with error code 1 2018-10-17 12:04:40,946 ERROR:0.9.11 Exception deploying version 0.9.50.post1 of package minemeld-engine Traceback (most recent call last): File "/usr/sbin/minemeld-auto-update", line 534, in deploy_package targetdir File "/usr/sbin/minemeld-auto-update", line 207, in engine_deployer raise RuntimeError('Error deploying package %s' % pname) RuntimeError: Error deploying package minemeld-engine 2018-10-17 12:04:41,004 INFO:0.9.11 Downloading package minemeld-webui version 0.9.50 from http://minemeld-updates.panw.io/stage2/0_9/minemeld-webui-0.9.50.tar.gz 2018-10-17 12:04:41,382 DEBUG:0.9.11 curl output: 2018-10-17 12:04:41,383 INFO:0.9.11 Package minemeld-webui version 0.9.50 downloaded in /tmp/minemeld-webuiIlwkyb 2018-10-17 12:04:41,590 INFO:0.9.11 Successfully deployed package minemeld-webui version 0.9.50 2018-10-17 12:04:41,602 INFO:0.9.11 Downloading package minemeld-prototypes version 0.9.50 from http://minemeld-updates.panw.io/stage2/0_9/minemeld-prototypes-0.9.50.tar.gz 2018-10-17 12:04:41,707 DEBUG:0.9.11 curl output: 2018-10-17 12:04:41,707 INFO:0.9.11 Package minemeld-prototypes version 0.9.50 downloaded in /tmp/minemeld-prototypesqqkiYG 2018-10-17 12:04:41,800 INFO:0.9.11 Successfully deployed package minemeld-prototypes version 0.9.50 2018-10-17 12:04:41,967 CRITICAL:0.9.11 One of the packages had errors, abort 2018-10-17 12:04:41,968 INFO:0.9.11 Removing stale version 0.9.50.post1 of package minemeld-engine 2018-10-17 12:04:42,200 INFO:0.9.11 Removing stale version 0.9.50 of package minemeld-webui 2018-10-17 12:04:42,330 INFO:0.9.11 Removing stale version 0.9.50 of package minemeld-prototypes ... View more

Hi Guy,   Any update?   I am interested in pulling data from SWIFT too.     ... View more

SSL Warnings urllib3 will issue several different warnings based on the level of certificate verification support. These warning indicate particular situations and can resolved in different ways. InsecureRequestWarning This happens when an request is made to an HTTPS URL without certificate verification enabled. Follow the certificate verification guide to resolve this warning. InsecurePlatformWarning This happens on Python 2 platforms that have an outdated ssl module. These older ssl modules can cause some insecure requests to succeed where they should fail and secure requests to fail where they should succeed. Follow the pyOpenSSL guide to resolve this warning. SNIMissingWarning This happens on Python 2 versions older than 2.7.9. These older versions lack SNI support. This can cause servers to present a certificate that the client thinks is invalid. Follow the pyOpenSSL guide to resolve this warning. ... View more

I use this config for blacklsit ip only   ... View more

@xhoms How do you config on MM & McAfee Product? Could you recommend to me? I 'm staritng to learning about McAfee Threat Intelligence Exchange (TIE) DXL.   Thank you. ... View more

Hi @xhoms   I found a issue because I hardening MM web server to support TLSv1.1/1.2 only but PAN Firewall connect to MM via TLSv1 as default. ... View more

Hi @xhoms   Have you test MineMeld with McAfee DXL (TIE)?   Thank you ... View more

@xhoms  This is good guideline.   Could you capture example for step 5 - 3. Certificate Profile including the CA that issued MineMeld's SSL certificate (for PANOS 8.0) or Step for generate  MineMeld's SSL certificate with CA?   I try to both certificate but it is not working. ... View more

@xhoms   My Palo cannot access to Minemeld. It show URL access error. I think that the certificate may be wrong and No log in access.log (Minemeld) ... View more

Please capture example certificate & certificate profile configuration ... View more

Yes, I allow access to Internet by a URL for MM Server. Could you recommend me for URL list that must allow it? ... View more

@lmori System Heath: Good     web.log in attachments ... View more

@lmori   I can't use command # sudo -u minemeld mm-console status sudo: mm-console: command not found   /opt/minemeld/log/minemeld-web.log   [2017-11-09 16:16:27 ICT] [11719] [INFO] USERS_DB loaded from /opt/minemeld/local/config/api/wsgi.htpasswd [2017-11-09 16:16:27 ICT] [11719] [INFO] FEEDS_USERS_DB loaded from /opt/minemeld/local/config/api/feeds.htpasswd [2017-11-09 16:16:56 +0000] [4481] [CRITICAL] WORKER TIMEOUT (pid:11719) [2017-11-09 16:16:56 +0000] [11719] [INFO] Worker exiting (pid: 11719) [2017-11-09 16:16:56 +0000] [11750] [INFO] Booting worker with pid: 11750 [2017-11-09 16:16:56 ICT] [11750] [INFO] MMLogger started /opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/flask/exthook.py:71: ExtDeprecationWarning: Importing flask.ext.login is deprecated, use flask_login instead. .format(x=modname), ExtDeprecationWarning [2017-11-09 16:16:57 ICT] [11750] [INFO] Config loaded: {'MINEMELD_LOCAL_LIBRARY_PATH': '/opt/minemeld/local/library', 'USERS_DB': 'wsgi.htpasswd', 'MINEMELD_LOCAL_PROTOTYPE_PATH': '/opt/minemeld/local/prototypes', 'SUPERVISOR_URL': 'unix:///var/run/minemeld/minemeld.sock', 'API_USERS_ATTRS': {}, 'MINEMELD_PROTOTYPE_PATH': '/opt/minemeld/local/prototypes/:/opt/minemeld/prototypes/current', 'MINEMELD_PIP_PATH': '/opt/minemeld/engine/current/bin/pip', 'FEEDS_ATTRS': {'siem_local_output': {'tags': ['feedti']}}, 'MINEMELD_TRACED_PURGE_PATH': '/opt/minemeld/engine/current/bin/mm-traced-purge', 'API_AUTH_ENABLED': True, 'FEEDS_AUTH_ENABLED': True, 'MINEMELD_LOG_DIRECTORY_PATH': '/opt/minemeld/log', 'FEEDS_USERS_ATTRS': {'fwuser': {'tags': ['feedti']}}, 'MINEMELD_7Z_PATH': '/usr/bin/7z', 'MINEMELD_RESTORE_PATH': '/opt/minemeld/engine/current/bin/mm-restore', 'MINEMELD_LOCAL_PATH': '/opt/minemeld/local', 'MINEMELD_GIT_PATH': '/usr/bin/git', 'SNS_ENABLED': True} [2017-11-09 16:16:57 ICT] [11750] [INFO] USERS_DB loaded from /opt/minemeld/local/config/api/wsgi.htpasswd [2017-11-09 16:16:57 ICT] [11750] [INFO] FEEDS_USERS_DB loaded from /opt/minemeld/local/config/api/feeds.htpasswd [2017-11-09 16:17:26 +0000] [4481] [CRITICAL] WORKER TIMEOUT (pid:11750) [2017-11-09 16:17:26 +0000] [11750] [INFO] Worker exiting (pid: 11750) [2017-11-09 16:17:26 +0000] [11770] [INFO] Booting worker with pid: 11770 [2017-11-09 16:17:27 ICT] [11770] [INFO] MMLogger started /opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/flask/exthook.py:71: ExtDeprecationWarning: Importing flask.ext.login is deprecated, use flask_login instead. .format(x=modname), ExtDeprecationWarning [2017-11-09 16:17:27 ICT] [11770] [INFO] Config loaded: {'MINEMELD_LOCAL_LIBRARY_PATH': '/opt/minemeld/local/library', 'USERS_DB': 'wsgi.htpasswd', 'MINEMELD_LOCAL_PROTOTYPE_PATH': '/opt/minemeld/local/prototypes', 'SUPERVISOR_URL': 'unix:///var/run/minemeld/minemeld.sock', 'API_USERS_ATTRS': {}, 'MINEMELD_PROTOTYPE_PATH': '/opt/minemeld/local/prototypes/:/opt/minemeld/prototypes/current', 'MINEMELD_PIP_PATH': '/opt/minemeld/engine/current/bin/pip', 'FEEDS_ATTRS': {'siem_local_output': {'tags': ['feedti']}}, 'MINEMELD_TRACED_PURGE_PATH': '/opt/minemeld/engine/current/bin/mm-traced-purge', 'API_AUTH_ENABLED': True, 'FEEDS_AUTH_ENABLED': True, 'MINEMELD_LOG_DIRECTORY_PATH': '/opt/minemeld/log', 'FEEDS_USERS_ATTRS': {'fwuser': {'tags': ['feedti']}}, 'MINEMELD_7Z_PATH': '/usr/bin/7z', 'MINEMELD_RESTORE_PATH': '/opt/minemeld/engine/current/bin/mm-restore', 'MINEMELD_LOCAL_PATH': '/opt/minemeld/local', 'MINEMELD_GIT_PATH': '/usr/bin/git', 'SNS_ENABLED': True} [2017-11-09 16:17:27 ICT] [11770] [INFO] USERS_DB loaded from /opt/minemeld/local/config/api/wsgi.htpasswd [2017-11-09 16:17:27 ICT] [11770] [INFO] FEEDS_USERS_DB loaded from /opt/minemeld/local/config/api/feeds.htpasswd [2017-11-09 16:17:56 +0000] [4481] [CRITICAL] WORKER TIMEOUT (pid:11770) [2017-11-09 16:17:56 +0000] [11770] [INFO] Worker exiting (pid: 11770) [2017-11-09 16:17:56 +0000] [11786] [INFO] Booting worker with pid: 11786 [2017-11-09 16:17:57 ICT] [11786] [INFO] MMLogger started /opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/flask/exthook.py:71: ExtDeprecationWarning: Importing flask.ext.login is deprecated, use flask_login instead. .format(x=modname), ExtDeprecationWarning [2017-11-09 16:17:57 ICT] [11786] [INFO] Config loaded: {'MINEMELD_LOCAL_LIBRARY_PATH': '/opt/minemeld/local/library', 'USERS_DB': 'wsgi.htpasswd', 'MINEMELD_LOCAL_PROTOTYPE_PATH': '/opt/minemeld/local/prototypes', 'SUPERVISOR_URL': 'unix:///var/run/minemeld/minemeld.sock', 'API_USERS_ATTRS': {}, 'MINEMELD_PROTOTYPE_PATH': '/opt/minemeld/local/prototypes/:/opt/minemeld/prototypes/current', 'MINEMELD_PIP_PATH': '/opt/minemeld/engine/current/bin/pip', 'FEEDS_ATTRS': {'siem_local_output': {'tags': ['feedti']}}, 'MINEMELD_TRACED_PURGE_PATH': '/opt/minemeld/engine/current/bin/mm-traced-purge', 'API_AUTH_ENABLED': True, 'FEEDS_AUTH_ENABLED': True, 'MINEMELD_LOG_DIRECTORY_PATH': '/opt/minemeld/log', 'FEEDS_USERS_ATTRS': {'fwuser': {'tags': ['feedti']}}, 'MINEMELD_7Z_PATH': '/usr/bin/7z', 'MINEMELD_RESTORE_PATH': '/opt/minemeld/engine/current/bin/mm-restore', 'MINEMELD_LOCAL_PATH': '/opt/minemeld/local', 'MINEMELD_GIT_PATH': '/usr/bin/git', 'SNS_ENABLED': True} [2017-11-09 16:17:57 ICT] [11786] [INFO] USERS_DB loaded from /opt/minemeld/local/config/api/wsgi.htpasswd [2017-11-09 16:17:57 ICT] [11786] [INFO] FEEDS_USERS_DB loaded from /opt/minemeld/local/config/api/feeds.htpasswd [2017-11-09 16:18:26 +0000] [4481] [CRITICAL] WORKER TIMEOUT (pid:11786) [2017-11-09 16:18:26 +0000] [11786] [INFO] Worker exiting (pid: 11786) [2017-11-09 16:18:27 +0000] [11799] [INFO] Booting worker with pid: 11799 [2017-11-09 16:18:27 ICT] [11799] [INFO] MMLogger started /opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/flask/exthook.py:71: ExtDeprecationWarning: Importing flask.ext.login is deprecated, use flask_login instead. .format(x=modname), ExtDeprecationWarning [2017-11-09 16:18:27 ICT] [11799] [INFO] Config loaded: {'MINEMELD_LOCAL_LIBRARY_PATH': '/opt/minemeld/local/library', 'USERS_DB': 'wsgi.htpasswd', 'MINEMELD_LOCAL_PROTOTYPE_PATH': '/opt/minemeld/local/prototypes', 'SUPERVISOR_URL': 'unix:///var/run/minemeld/minemeld.sock', 'API_USERS_ATTRS': {}, 'MINEMELD_PROTOTYPE_PATH': '/opt/minemeld/local/prototypes/:/opt/minemeld/prototypes/current', 'MINEMELD_PIP_PATH': '/opt/minemeld/engine/current/bin/pip', 'FEEDS_ATTRS': {'siem_local_output': {'tags': ['feedti']}}, 'MINEMELD_TRACED_PURGE_PATH': '/opt/minemeld/engine/current/bin/mm-traced-purge', 'API_AUTH_ENABLED': True, 'FEEDS_AUTH_ENABLED': True, 'MINEMELD_LOG_DIRECTORY_PATH': '/opt/minemeld/log', 'FEEDS_USERS_ATTRS': {'fwuser': {'tags': ['feedti']}}, 'MINEMELD_7Z_PATH': '/usr/bin/7z', 'MINEMELD_RESTORE_PATH': '/opt/minemeld/engine/current/bin/mm-restore', 'MINEMELD_LOCAL_PATH': '/opt/minemeld/local', 'MINEMELD_GIT_PATH': '/usr/bin/git', 'SNS_ENABLED': True} [2017-11-09 16:18:27 ICT] [11799] [INFO] USERS_DB loaded from /opt/minemeld/local/config/api/wsgi.htpasswd [2017-11-09 16:18:27 ICT] [11799] [INFO] FEEDS_USERS_DB loaded from /opt/minemeld/local/config/api/feeds.htpasswd ... View more

@lmori   Thank you. But I activate API. I found message: Processing /opt/minemeld/local/library/minemeld_misp-0.1b5-py2-none-any.whl Requirement already satisfied: minemeld-core==0.9.44 in /opt/minemeld/engine/0.9.44/lib/python2.7/site-packages (from -c /opt/minemeld/local/library/constraints.txt (line 31)) Collecting pymisp (from minemeld-misp==0.1b5) /opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/pip/_vendor/requests/packages/urllib3/util/ssl_.py:318: SNIMissingWarning: An HTTPS request has been made, but the SNI (Subject Name Indication) extension to TLS is not available on this platform. This may cause the server to present an incorrect TLS certificate, which can cause validation failures. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/security.html#snimissingwarning. SNIMissingWarning /opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/pip/_vendor/requests/packages/urllib3/util/ssl_.py:122: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/security.html#insecureplatformwarning. InsecurePlatformWarning Retrying (Retry(total=4, connect=None, read=None, redirect=None)) after connection broken by 'ProtocolError('Connection aborted.', error(104, 'Connection reset by peer'))': /simple/pymisp/ /opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/pip/_vendor/requests/packages/urllib3/util/ssl_.py:122: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/security.html#insecureplatformwarning. InsecurePlatformWarning Retrying (Retry(total=3, connect=None, read=None, redirect=None)) after connection broken by 'ProtocolError('Connection aborted.', error(104, 'Connection reset by peer'))': /simple/pymisp/ /opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/pip/_vendor/requests/packages/urllib3/util/ssl_.py:122: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/security.html#insecureplatformwarning. InsecurePlatformWarning Retrying (Retry(total=2, connect=None, read=None, redirect=None)) after connection broken by 'ProtocolError('Connection aborted.', error(104, 'Connection reset by peer'))': /simple/pymisp/ /opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/pip/_vendor/requests/packages/urllib3/util/ssl_.py:122: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/security.html#insecureplatformwarning. InsecurePlatformWarning Retrying (Retry(total=1, connect=None, read=None, redirect=None)) after connection broken by 'ProtocolError('Connection aborted.', error(104, 'Connection reset by peer'))': /simple/pymisp/ /opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/pip/_vendor/requests/packages/urllib3/util/ssl_.py:122: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/security.html#insecureplatformwarning. InsecurePlatformWarning Retrying (Retry(total=0, connect=None, read=None, redirect=None)) after connection broken by 'ProtocolError('Connection aborted.', error(104, 'Connection reset by peer'))': /simple/pymisp/ /opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/pip/_vendor/requests/packages/urllib3/util/ssl_.py:122: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/security.html#insecureplatformwarning. InsecurePlatformWarning Could not find a version that satisfies the requirement pymisp (from minemeld-misp==0.1b5) (from versions: ) No matching distribution found for pymisp (from minemeld-misp==0.1b5) /opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/pip/_vendor/requests/packages/urllib3/util/ssl_.py:122: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/security.html#insecureplatformwarning. InsecurePlatformWarning ... View more

@lmori Do you have .yml file? My company block .git file from Server.   https://github.com/PaloAltoNetworks/minemeld-misp ... View more

Hi  Luigi,   Can Syslog Miner receive syslog log from other devices (such as SIEM, IPS)?   Thanks ... View more

I found error when activate " minemeld-misp " extensions   Please recommend me:   Collecting pymisp (from minemeld-misp==0.1b5) /opt/minemeld/engine/0.9.42/local/lib/python2.7/site-packages/pip/_vendor/requests/packages/urllib3/util/ssl_.py:318: SNIMissingWarning: An HTTPS request has been made, but the SNI (Subject Name Indication) extension to TLS is not available on this platform. This may cause the server to present an incorrect TLS certificate, which can cause validation failures. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/security.html#snimissingwarning. SNIMissingWarning /opt/minemeld/engine/0.9.42/local/lib/python2.7/site-packages/pip/_vendor/requests/packages/urllib3/util/ssl_.py:122: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/security.html#insecureplatformwarning. InsecurePlatformWarning Retrying (Retry(total=4, connect=None, read=None, redirect=None)) after connection broken by 'ProtocolError('Connection aborted.', error(104, 'Connection reset by peer'))': /simple/pymisp/ /opt/minemeld/engine/0.9.42/local/lib/python2.7/site-packages/pip/_vendor/requests/packages/urllib3/util/ssl_.py:122: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.io/en/latest/security.html#insecureplatformwarning. InsecurePlatformWarning see full log in attachments ... View more

Hi @rajeevtam   Do you have solution? Could you recommend me? ... View more

@lmori please advise me ... View more

I found error on Virutotal Miner   2017-09-06T10:40:12 (2906)basepoller._polling_loop INFO: Polling virustotal 2017-09-06T10:40:12 (2906)connectionpool._new_conn INFO: Starting new HTTPS connection (1): www.virustotal.com 2017-09-06T10:40:13 (2906)basepoller._poll ERROR: Exception in polling loop for virustotal: No JSON object could be decoded Traceback (most recent call last): File "/opt/minemeld/engine/0.9.42/local/lib/python2.7/site-packages/minemeld/ft/basepoller.py", line 721, in _poll performed = self._polling_loop() File "/opt/minemeld/engine/0.9.42/local/lib/python2.7/site-packages/minemeld/ft/basepoller.py", line 571, in _polling_loop iterator = self._build_iterator(now) File "/opt/minemeld/engine/0.9.42/local/lib/python2.7/site-packages/minemeld/ft/vt.py", line 88, in _build_iterator return super(Notifications, self)._build_iterator(now) File "/opt/minemeld/engine/0.9.42/local/lib/python2.7/site-packages/minemeld/ft/json.py", line 135, in _build_iterator result = self.extractor.search(r.json()) File "/opt/minemeld/engine/0.9.42/local/lib/python2.7/site-packages/requests/models.py", line 819, in json return json.loads(self.text, **kwargs) File "/usr/lib/python2.7/json/__init__.py", line 338, in loads return _default_decoder.decode(s) File "/usr/lib/python2.7/json/decoder.py", line 366, in decode obj, end = self.raw_decode(s, idx=_w(s, 0).end()) File "/usr/lib/python2.7/json/decoder.py", line 384, in raw_decode raise ValueError("No JSON object could be decoded") ValueError: No JSON object could be decoded 2017-09-06T10:40:17 (2906)basepoller._actor_loop INFO: virustotal - command: 1504669206980 age_out 2017-09-06T10:40:17 (2906)table._query_by_index INFO: Deleted in scan of _age_out: 0 2017-09-06T10:40:17 (2906)basepoller._actor_loop INFO: virustotal - command: 1504669206980 gc 2017-09-06T10:40:17 (2906)table._query_by_index INFO: Deleted in scan of _withdrawn: 0 2017-09-06T10:40:22 (2906)basepoller._actor_loop INFO: dshield_blocklist - command: 1504669222341 age_out 2017-09-06T10:40:22 (2906)table._query_by_index INFO: Deleted in scan of _age_out: 0   Please advise me   Thank you   ... View more

Now I bypass Proxy. It is work normally. ... View more