Support Questions
Find answers, ask questions, and share your expertise

Exception in indexingBolt of indexing topology

Explorer

After runing Metron a little while,I received this exception:

index [yaf_index_2017.02.23.16], type [yaf_doc], id [AVpp_hu_luwdJ-LP4qUA], message [MapperParsingException[failed to parse [ip_dst_addr]]; nested: IllegalArgumentException[failed to parse ip [ff02::0001:0003], not a valid ipv4 address (4 dots)];]

How do i resolve it ? I'll appreciate it for any help!

1 ACCEPTED SOLUTION

Accepted Solutions

Rising Star

It looks like Yaf is sending some ipv6 traffic. The Yaf parser is only setup for ipv4. Try adding --ip4-only to the yaf startup script (/opt/yaf/start-yaf.sh). Please let me know if that works and we can open up a JIRA to address it. Thanks! -David...

View solution in original post

5 REPLIES 5

Rising Star

It looks like Yaf is sending some ipv6 traffic. The Yaf parser is only setup for ipv4. Try adding --ip4-only to the yaf startup script (/opt/yaf/start-yaf.sh). Please let me know if that works and we can open up a JIRA to address it. Thanks! -David...

View solution in original post

Explorer

Thanks,i will have a try! but i have the same problem with bro.how can i do it ?

Explorer

could you show me how to filter IPv6 in bro logs.

Explorer

btw,it does not works .

Explorer

i am sorry,i take a mistake , your advice works. thks