You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@metron.apache.org by Ziaja Aleksander <Al...@coi.gov.pl> on 2017/07/25 14:49:03 UTC
FW: STIX extractor problem.
Hi All,
I would like to ask you (I still can not figure out why it happenes , may be it is so obvious ...) what means exeption:
Exception in thread "main" java.lang.IllegalStateException: Extractor must be a STIX Extractor
at org.apache.metron.dataloads.nonbulk.taxii.TaxiiLoader.main(TaxiiLoader.java:202)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.apache.hadoop.util.RunJar.run(RunJar.java:233)
at org.apache.hadoop.util.RunJar.main(RunJar.java:148)
executed: /usr/metron/0.4.0/bin/threatintel_taxii_load.sh -c /opt/taxii/connection.json -e /opt/taxii/extractor.json
os: Centos 7
config files:
cat /opt/taxii/connection.json
{
"endpoint" : "https://xxxxx/taxii-discovery-service"
,"type" : "DISCOVER"
,"username" : "xxxx"
,"password" : "xxxx"
,"collection" : "guest.Abuse_ch"
,"table" : "threat_intel"
,"columnFamily" : "cf"
,"allowedIndicatorTypes" : [ "domainname:FQDN", "address:IPV_4_ADDR" ]
}
cat /opt/taxi/extractor.json
{
"config" : {
"stix_address_categories" : "IPV_4_ADDR"
}
,"extractor" : "STIX"
}
So please, any sugestions welcome.
Thank you in advance.
-Alex
RE: FW: STIX extractor problem.
Posted by Ziaja Aleksander <Al...@coi.gov.pl>.
I seems to be working now corrrectly.
Thank you for help.
-az
From: Casey Stella [mailto:cestella@gmail.com]
Sent: Wednesday, July 26, 2017 12:31 PM
To: user@metron.apache.org
Cc: user@metron.incubator.apache.org
Subject: Re: FW: STIX extractor problem.
You are absolutely 100% right. I missed a cast; sorry about that! I updated the PR to be correct and updated the integration test too. If you could try the patch again, that'd be appreciated.
On Wed, Jul 26, 2017 at 11:21 AM, Ziaja Aleksander <ma...@coi.gov.pl> wrote:
You are right:
17/07/26 12:18:03 INFO state.ConnectionStateManager: State change: CONNECTED
Exception in thread "main" java.lang.ClassCastException: org.apache.metron.dataloads.extractor.TransformFilterExtractorDecorator cannot be cast to org.apache.metron.dataloads.extractor.stix.StixExtractor
at org.apache.metron.dataloads.nonbulk.taxii.TaxiiLoader.main(TaxiiLoader.java:204)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.apache.hadoop.util.RunJar.run(RunJar.java:233)
at org.apache.hadoop.util.RunJar.main(RunJar.java:148)
these exeption below was after my own changes on original code 0.4.0 , sorry.
rgds
az
From: Casey Stella [mailto:mailto:cestella@gmail.com]
Sent: Wednesday, July 26, 2017 11:56 AM
To: mailto:user@metron.apache.org
Cc: mailto:user@metron.incubator.apache.org
Subject: Re: FW: STIX extractor problem.
Are you sure you applied the patch and rebuilt? Line 189 of TaxiiLoader doesn't cast to StixExtractor. If it were a problem, I'd expect the line to be 204 of TaxiiLoader.java
On Wed, Jul 26, 2017 at 10:03 AM, Ziaja Aleksander <ma...@coi.gov.pl> wrote:
Hi again.
After patching there i san exeption:
Exception in thread "main" java.lang.ClassCastException: org.apache.metron.dataloads.extractor.TransformFilterExtractorDecorator cannot be cast to org.apache.metron.dataloads.extractor.stix.StixExtractor
at org.apache.metron.dataloads.nonbulk.taxii.TaxiiLoader.main(TaxiiLoader.java:189)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.apache.hadoop.util.RunJar.run(RunJar.java:233)
at org.apache.hadoop.util.RunJar.main(RunJar.java:148)
Config files are the same (as below)
Is the rany problem in config file know , please?
Rgds,
-aziaja
From: Casey Stella [mailto:mailto:mailto:mailto:cestella@gmail.com]
Sent: Tuesday, July 25, 2017 4:52 PM
To: mailto:mailto:user@metron.apache.org
Cc: mailto:mailto:user@metron.incubator.apache.org
Subject: Re: FW: STIX extractor problem.
Yep, unfortunately this is a bug and there's a PR open for it: METRON-1026 https://github.com/apache/metron/pull/643
On Tue, Jul 25, 2017 at 3:49 PM, Ziaja Aleksander <ma...@coi.gov.pl> wrote:
Hi All,
I would like to ask you (I still can not figure out why it happenes , may be it is so obvious ...) what means exeption:
Exception in thread "main" java.lang.IllegalStateException: Extractor must be a STIX Extractor
at org.apache.metron.dataloads.nonbulk.taxii.TaxiiLoader.main(TaxiiLoader.java:202)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.apache.hadoop.util.RunJar.run(RunJar.java:233)
at org.apache.hadoop.util.RunJar.main(RunJar.java:148)
executed: /usr/metron/0.4.0/bin/threatintel_taxii_load.sh -c /opt/taxii/connection.json -e /opt/taxii/extractor.json
os: Centos 7
config files:
cat /opt/taxii/connection.json
{
"endpoint" : "https://xxxxx/taxii-discovery-service"
,"type" : "DISCOVER"
,"username" : "xxxx"
,"password" : "xxxx"
,"collection" : "guest.Abuse_ch"
,"table" : "threat_intel"
,"columnFamily" : "cf"
,"allowedIndicatorTypes" : [ "domainname:FQDN", "address:IPV_4_ADDR" ]
}
cat /opt/taxi/extractor.json
{
"config" : {
"stix_address_categories" : "IPV_4_ADDR"
}
,"extractor" : "STIX"
}
So please, any sugestions welcome.
Thank you in advance.
-Alex
Re: FW: STIX extractor problem.
Posted by Casey Stella <ce...@gmail.com>.
You are absolutely 100% right. I missed a cast; sorry about that! I
updated the PR to be correct and updated the integration test too. If you
could try the patch again, that'd be appreciated.
On Wed, Jul 26, 2017 at 11:21 AM, Ziaja Aleksander <
Aleksander.Ziaja@coi.gov.pl> wrote:
> You are right:
> 17/07/26 12:18:03 INFO state.ConnectionStateManager: State change:
> CONNECTED
> Exception in thread "main" java.lang.ClassCastException:
> org.apache.metron.dataloads.extractor.TransformFilterExtractorDecorator
> cannot be cast to org.apache.metron.dataloads.extractor.stix.StixExtractor
> at org.apache.metron.dataloads.nonbulk.taxii.TaxiiLoader.
> main(TaxiiLoader.java:204)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(
> NativeMethodAccessorImpl.java:62)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(
> DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:498)
> at org.apache.hadoop.util.RunJar.run(RunJar.java:233)
> at org.apache.hadoop.util.RunJar.main(RunJar.java:148)
>
> these exeption below was after my own changes on original code 0.4.0 ,
> sorry.
> rgds
> az
>
> From: Casey Stella [mailto:cestella@gmail.com]
> Sent: Wednesday, July 26, 2017 11:56 AM
> To: user@metron.apache.org
> Cc: user@metron.incubator.apache.org
> Subject: Re: FW: STIX extractor problem.
>
> Are you sure you applied the patch and rebuilt? Line 189 of TaxiiLoader
> doesn't cast to StixExtractor. If it were a problem, I'd expect the line
> to be 204 of TaxiiLoader.java
>
> On Wed, Jul 26, 2017 at 10:03 AM, Ziaja Aleksander <mailto:
> Aleksander.Ziaja@coi.gov.pl> wrote:
> Hi again.
> After patching there i san exeption:
>
> Exception in thread "main" java.lang.ClassCastException:
> org.apache.metron.dataloads.extractor.TransformFilterExtractorDecorator
> cannot be cast to org.apache.metron.dataloads.extractor.stix.StixExtractor
> at org.apache.metron.dataloads.nonbulk.taxii.TaxiiLoader.
> main(TaxiiLoader.java:189)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(
> NativeMethodAccessorImpl.java:62)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(
> DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:498)
> at org.apache.hadoop.util.RunJar.run(RunJar.java:233)
> at org.apache.hadoop.util.RunJar.main(RunJar.java:148)
>
> Config files are the same (as below)
> Is the rany problem in config file know , please?
>
> Rgds,
> -aziaja
>
> From: Casey Stella [mailto:mailto:cestella@gmail.com]
> Sent: Tuesday, July 25, 2017 4:52 PM
> To: mailto:user@metron.apache.org
> Cc: mailto:user@metron.incubator.apache.org
> Subject: Re: FW: STIX extractor problem.
>
> Yep, unfortunately this is a bug and there's a PR open for it: METRON-1026
> https://github.com/apache/metron/pull/643
>
> On Tue, Jul 25, 2017 at 3:49 PM, Ziaja Aleksander <mailto:mailto:
> Aleksander.Ziaja@coi.gov.pl> wrote:
> Hi All,
>
> I would like to ask you (I still can not figure out why it happenes , may
> be it is so obvious ...) what means exeption:
>
>
>
> Exception in thread "main" java.lang.IllegalStateException: Extractor
> must be a STIX Extractor
> at org.apache.metron.dataloads.nonbulk.taxii.TaxiiLoader.
> main(TaxiiLoader.java:202)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(
> NativeMethodAccessorImpl.java:62)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(
> DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:498)
> at org.apache.hadoop.util.RunJar.run(RunJar.java:233)
> at org.apache.hadoop.util.RunJar.main(RunJar.java:148)
>
> executed: /usr/metron/0.4.0/bin/threatintel_taxii_load.sh -c
> /opt/taxii/connection.json -e /opt/taxii/extractor.json
> os: Centos 7
>
> config files:
> cat /opt/taxii/connection.json
> {
> "endpoint" : "https://xxxxx/taxii-discovery-service"
> ,"type" : "DISCOVER"
> ,"username" : "xxxx"
> ,"password" : "xxxx"
> ,"collection" : "guest.Abuse_ch"
> ,"table" : "threat_intel"
> ,"columnFamily" : "cf"
> ,"allowedIndicatorTypes" : [ "domainname:FQDN", "address:IPV_4_ADDR" ]
> }
>
> cat /opt/taxi/extractor.json
> {
> "config" : {
> "stix_address_categories" : "IPV_4_ADDR"
> }
> ,"extractor" : "STIX"
> }
>
> So please, any sugestions welcome.
> Thank you in advance.
> -Alex
>
>
RE: FW: STIX extractor problem.
Posted by Ziaja Aleksander <Al...@coi.gov.pl>.
You are right:
17/07/26 12:18:03 INFO state.ConnectionStateManager: State change: CONNECTED
Exception in thread "main" java.lang.ClassCastException: org.apache.metron.dataloads.extractor.TransformFilterExtractorDecorator cannot be cast to org.apache.metron.dataloads.extractor.stix.StixExtractor
at org.apache.metron.dataloads.nonbulk.taxii.TaxiiLoader.main(TaxiiLoader.java:204)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.apache.hadoop.util.RunJar.run(RunJar.java:233)
at org.apache.hadoop.util.RunJar.main(RunJar.java:148)
these exeption below was after my own changes on original code 0.4.0 , sorry.
rgds
az
From: Casey Stella [mailto:cestella@gmail.com]
Sent: Wednesday, July 26, 2017 11:56 AM
To: user@metron.apache.org
Cc: user@metron.incubator.apache.org
Subject: Re: FW: STIX extractor problem.
Are you sure you applied the patch and rebuilt? Line 189 of TaxiiLoader doesn't cast to StixExtractor. If it were a problem, I'd expect the line to be 204 of TaxiiLoader.java
On Wed, Jul 26, 2017 at 10:03 AM, Ziaja Aleksander <ma...@coi.gov.pl> wrote:
Hi again.
After patching there i san exeption:
Exception in thread "main" java.lang.ClassCastException: org.apache.metron.dataloads.extractor.TransformFilterExtractorDecorator cannot be cast to org.apache.metron.dataloads.extractor.stix.StixExtractor
at org.apache.metron.dataloads.nonbulk.taxii.TaxiiLoader.main(TaxiiLoader.java:189)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.apache.hadoop.util.RunJar.run(RunJar.java:233)
at org.apache.hadoop.util.RunJar.main(RunJar.java:148)
Config files are the same (as below)
Is the rany problem in config file know , please?
Rgds,
-aziaja
From: Casey Stella [mailto:mailto:cestella@gmail.com]
Sent: Tuesday, July 25, 2017 4:52 PM
To: mailto:user@metron.apache.org
Cc: mailto:user@metron.incubator.apache.org
Subject: Re: FW: STIX extractor problem.
Yep, unfortunately this is a bug and there's a PR open for it: METRON-1026 https://github.com/apache/metron/pull/643
On Tue, Jul 25, 2017 at 3:49 PM, Ziaja Aleksander <ma...@coi.gov.pl> wrote:
Hi All,
I would like to ask you (I still can not figure out why it happenes , may be it is so obvious ...) what means exeption:
Exception in thread "main" java.lang.IllegalStateException: Extractor must be a STIX Extractor
at org.apache.metron.dataloads.nonbulk.taxii.TaxiiLoader.main(TaxiiLoader.java:202)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.apache.hadoop.util.RunJar.run(RunJar.java:233)
at org.apache.hadoop.util.RunJar.main(RunJar.java:148)
executed: /usr/metron/0.4.0/bin/threatintel_taxii_load.sh -c /opt/taxii/connection.json -e /opt/taxii/extractor.json
os: Centos 7
config files:
cat /opt/taxii/connection.json
{
"endpoint" : "https://xxxxx/taxii-discovery-service"
,"type" : "DISCOVER"
,"username" : "xxxx"
,"password" : "xxxx"
,"collection" : "guest.Abuse_ch"
,"table" : "threat_intel"
,"columnFamily" : "cf"
,"allowedIndicatorTypes" : [ "domainname:FQDN", "address:IPV_4_ADDR" ]
}
cat /opt/taxi/extractor.json
{
"config" : {
"stix_address_categories" : "IPV_4_ADDR"
}
,"extractor" : "STIX"
}
So please, any sugestions welcome.
Thank you in advance.
-Alex
Re: FW: STIX extractor problem.
Posted by Casey Stella <ce...@gmail.com>.
Are you sure you applied the patch and rebuilt? Line 189 of TaxiiLoader
doesn't cast to StixExtractor. If it were a problem, I'd expect the line
to be 204 of TaxiiLoader.java
On Wed, Jul 26, 2017 at 10:03 AM, Ziaja Aleksander <
Aleksander.Ziaja@coi.gov.pl> wrote:
> Hi again.
> After patching there i san exeption:
>
> Exception in thread "main" java.lang.ClassCastException:
> org.apache.metron.dataloads.extractor.TransformFilterExtractorDecorator
> cannot be cast to org.apache.metron.dataloads.extractor.stix.StixExtractor
> at org.apache.metron.dataloads.nonbulk.taxii.TaxiiLoader.
> main(TaxiiLoader.java:189)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(
> NativeMethodAccessorImpl.java:62)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(
> DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:498)
> at org.apache.hadoop.util.RunJar.run(RunJar.java:233)
> at org.apache.hadoop.util.RunJar.main(RunJar.java:148)
>
> Config files are the same (as below)
> Is the rany problem in config file know , please?
>
> Rgds,
> -aziaja
>
> From: Casey Stella [mailto:cestella@gmail.com]
> Sent: Tuesday, July 25, 2017 4:52 PM
> To: user@metron.apache.org
> Cc: user@metron.incubator.apache.org
> Subject: Re: FW: STIX extractor problem.
>
> Yep, unfortunately this is a bug and there's a PR open for it: METRON-1026
> https://github.com/apache/metron/pull/643
>
>
> On Tue, Jul 25, 2017 at 3:49 PM, Ziaja Aleksander <mailto:
> Aleksander.Ziaja@coi.gov.pl> wrote:
> Hi All,
>
> I would like to ask you (I still can not figure out why it happenes , may
> be it is so obvious ...) what means exeption:
>
>
>
> Exception in thread "main" java.lang.IllegalStateException: Extractor
> must be a STIX Extractor
> at org.apache.metron.dataloads.nonbulk.taxii.TaxiiLoader.
> main(TaxiiLoader.java:202)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(
> NativeMethodAccessorImpl.java:62)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(
> DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:498)
> at org.apache.hadoop.util.RunJar.run(RunJar.java:233)
> at org.apache.hadoop.util.RunJar.main(RunJar.java:148)
>
> executed: /usr/metron/0.4.0/bin/threatintel_taxii_load.sh -c
> /opt/taxii/connection.json -e /opt/taxii/extractor.json
> os: Centos 7
>
> config files:
> cat /opt/taxii/connection.json
> {
> "endpoint" : "https://xxxxx/taxii-discovery-service"
> ,"type" : "DISCOVER"
> ,"username" : "xxxx"
> ,"password" : "xxxx"
> ,"collection" : "guest.Abuse_ch"
> ,"table" : "threat_intel"
> ,"columnFamily" : "cf"
> ,"allowedIndicatorTypes" : [ "domainname:FQDN", "address:IPV_4_ADDR" ]
> }
>
> cat /opt/taxi/extractor.json
> {
> "config" : {
> "stix_address_categories" : "IPV_4_ADDR"
> }
> ,"extractor" : "STIX"
> }
>
> So please, any sugestions welcome.
> Thank you in advance.
> -Alex
>
>
RE: FW: STIX extractor problem.
Posted by Ziaja Aleksander <Al...@coi.gov.pl>.
Hi again.
After patching there i san exeption:
Exception in thread "main" java.lang.ClassCastException: org.apache.metron.dataloads.extractor.TransformFilterExtractorDecorator cannot be cast to org.apache.metron.dataloads.extractor.stix.StixExtractor
at org.apache.metron.dataloads.nonbulk.taxii.TaxiiLoader.main(TaxiiLoader.java:189)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.apache.hadoop.util.RunJar.run(RunJar.java:233)
at org.apache.hadoop.util.RunJar.main(RunJar.java:148)
Config files are the same (as below)
Is the rany problem in config file know , please?
Rgds,
-aziaja
From: Casey Stella [mailto:cestella@gmail.com]
Sent: Tuesday, July 25, 2017 4:52 PM
To: user@metron.apache.org
Cc: user@metron.incubator.apache.org
Subject: Re: FW: STIX extractor problem.
Yep, unfortunately this is a bug and there's a PR open for it: METRON-1026 https://github.com/apache/metron/pull/643
On Tue, Jul 25, 2017 at 3:49 PM, Ziaja Aleksander <ma...@coi.gov.pl> wrote:
Hi All,
I would like to ask you (I still can not figure out why it happenes , may be it is so obvious ...) what means exeption:
Exception in thread "main" java.lang.IllegalStateException: Extractor must be a STIX Extractor
at org.apache.metron.dataloads.nonbulk.taxii.TaxiiLoader.main(TaxiiLoader.java:202)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.apache.hadoop.util.RunJar.run(RunJar.java:233)
at org.apache.hadoop.util.RunJar.main(RunJar.java:148)
executed: /usr/metron/0.4.0/bin/threatintel_taxii_load.sh -c /opt/taxii/connection.json -e /opt/taxii/extractor.json
os: Centos 7
config files:
cat /opt/taxii/connection.json
{
"endpoint" : "https://xxxxx/taxii-discovery-service"
,"type" : "DISCOVER"
,"username" : "xxxx"
,"password" : "xxxx"
,"collection" : "guest.Abuse_ch"
,"table" : "threat_intel"
,"columnFamily" : "cf"
,"allowedIndicatorTypes" : [ "domainname:FQDN", "address:IPV_4_ADDR" ]
}
cat /opt/taxi/extractor.json
{
"config" : {
"stix_address_categories" : "IPV_4_ADDR"
}
,"extractor" : "STIX"
}
So please, any sugestions welcome.
Thank you in advance.
-Alex
RE: FW: STIX extractor problem.
Posted by Otto Fowler <ot...@gmail.com>.
You can still be goofy, but there is nothing wrong with that :)
On July 25, 2017 at 10:58:05, Ziaja Aleksander (aleksander.ziaja@coi.gov.pl)
wrote:
Thanks God. I have thought I am goofy J
Thank you for quick ans. I will patch.
-AZ
*From:* Casey Stella [mailto:cestella@gmail.com]
*Sent:* Tuesday, July 25, 2017 4:52 PM
*To:* user@metron.apache.org
*Cc:* user@metron.incubator.apache.org
*Subject:* Re: FW: STIX extractor problem.
Yep, unfortunately this is a bug and there's a PR open for it: METRON-1026
https://github.com/apache/metron/pull/643
On Tue, Jul 25, 2017 at 3:49 PM, Ziaja Aleksander <
Aleksander.Ziaja@coi.gov.pl> wrote:
Hi All,
I would like to ask you (I still can not figure out why it happenes , may
be it is so obvious ...) what means exeption:
Exception in thread "main" java.lang.IllegalStateException: Extractor must
be a STIX Extractor
at
org.apache.metron.dataloads.nonbulk.taxii.TaxiiLoader.main(TaxiiLoader.java:202)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.apache.hadoop.util.RunJar.run(RunJar.java:233)
at org.apache.hadoop.util.RunJar.main(RunJar.java:148)
executed: /usr/metron/0.4.0/bin/threatintel_taxii_load.sh -c
/opt/taxii/connection.json -e /opt/taxii/extractor.json
os: Centos 7
config files:
cat /opt/taxii/connection.json
{
"endpoint" : "https://xxxxx/taxii-discovery-service"
,"type" : "DISCOVER"
,"username" : "xxxx"
,"password" : "xxxx"
,"collection" : "guest.Abuse_ch"
,"table" : "threat_intel"
,"columnFamily" : "cf"
,"allowedIndicatorTypes" : [ "domainname:FQDN", "address:IPV_4_ADDR" ]
}
cat /opt/taxi/extractor.json
{
"config" : {
"stix_address_categories" : "IPV_4_ADDR"
}
,"extractor" : "STIX"
}
So please, any sugestions welcome.
Thank you in advance.
-Alex
RE: FW: STIX extractor problem.
Posted by Ziaja Aleksander <Al...@coi.gov.pl>.
Thanks God. I have thought I am goofy ☺
Thank you for quick ans. I will patch.
-AZ
From: Casey Stella [mailto:cestella@gmail.com]
Sent: Tuesday, July 25, 2017 4:52 PM
To: user@metron.apache.org
Cc: user@metron.incubator.apache.org
Subject: Re: FW: STIX extractor problem.
Yep, unfortunately this is a bug and there's a PR open for it: METRON-1026 https://github.com/apache/metron/pull/643
On Tue, Jul 25, 2017 at 3:49 PM, Ziaja Aleksander <Al...@coi.gov.pl>> wrote:
Hi All,
I would like to ask you (I still can not figure out why it happenes , may be it is so obvious ...) what means exeption:
Exception in thread "main" java.lang.IllegalStateException: Extractor must be a STIX Extractor
at org.apache.metron.dataloads.nonbulk.taxii.TaxiiLoader.main(TaxiiLoader.java:202)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.apache.hadoop.util.RunJar.run(RunJar.java:233)
at org.apache.hadoop.util.RunJar.main(RunJar.java:148)
executed: /usr/metron/0.4.0/bin/threatintel_taxii_load.sh -c /opt/taxii/connection.json -e /opt/taxii/extractor.json
os: Centos 7
config files:
cat /opt/taxii/connection.json
{
"endpoint" : "https://xxxxx/taxii-discovery-service"
,"type" : "DISCOVER"
,"username" : "xxxx"
,"password" : "xxxx"
,"collection" : "guest.Abuse_ch"
,"table" : "threat_intel"
,"columnFamily" : "cf"
,"allowedIndicatorTypes" : [ "domainname:FQDN", "address:IPV_4_ADDR" ]
}
cat /opt/taxi/extractor.json
{
"config" : {
"stix_address_categories" : "IPV_4_ADDR"
}
,"extractor" : "STIX"
}
So please, any sugestions welcome.
Thank you in advance.
-Alex
Re: FW: STIX extractor problem.
Posted by Casey Stella <ce...@gmail.com>.
Yep, unfortunately this is a bug and there's a PR open for it: METRON-1026
https://github.com/apache/metron/pull/643
On Tue, Jul 25, 2017 at 3:49 PM, Ziaja Aleksander <
Aleksander.Ziaja@coi.gov.pl> wrote:
> Hi All,
>
> I would like to ask you (I still can not figure out why it happenes , may
> be it is so obvious ...) what means exeption:
>
>
>
> Exception in thread "main" java.lang.IllegalStateException: Extractor
> must be a STIX Extractor
> at org.apache.metron.dataloads.nonbulk.taxii.TaxiiLoader.
> main(TaxiiLoader.java:202)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(
> NativeMethodAccessorImpl.java:62)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(
> DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:498)
> at org.apache.hadoop.util.RunJar.run(RunJar.java:233)
> at org.apache.hadoop.util.RunJar.main(RunJar.java:148)
>
> executed: /usr/metron/0.4.0/bin/threatintel_taxii_load.sh -c
> /opt/taxii/connection.json -e /opt/taxii/extractor.json
> os: Centos 7
>
> config files:
> cat /opt/taxii/connection.json
> {
> "endpoint" : "https://xxxxx/taxii-discovery-service"
> ,"type" : "DISCOVER"
> ,"username" : "xxxx"
> ,"password" : "xxxx"
> ,"collection" : "guest.Abuse_ch"
> ,"table" : "threat_intel"
> ,"columnFamily" : "cf"
> ,"allowedIndicatorTypes" : [ "domainname:FQDN", "address:IPV_4_ADDR" ]
> }
>
> cat /opt/taxi/extractor.json
> {
> "config" : {
> "stix_address_categories" : "IPV_4_ADDR"
> }
> ,"extractor" : "STIX"
> }
>
> So please, any sugestions welcome.
> Thank you in advance.
> -Alex
>
>