Support Questions
Find answers, ask questions, and share your expertise

Exception in indexingBolt of indexing topology

Solved Go to solution
Highlighted

Exception in indexingBolt of indexing topology

Explorer

After runing Metron a little while,I received this exception:

index [yaf_index_2017.02.23.16], type [yaf_doc], id [AVpp_hu_luwdJ-LP4qUA], message [MapperParsingException[failed to parse [ip_dst_addr]]; nested: IllegalArgumentException[failed to parse ip [ff02::0001:0003], not a valid ipv4 address (4 dots)];]

How do i resolve it ? I'll appreciate it for any help!

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Exception in indexingBolt of indexing topology

Rising Star

It looks like Yaf is sending some ipv6 traffic. The Yaf parser is only setup for ipv4. Try adding --ip4-only to the yaf startup script (/opt/yaf/start-yaf.sh). Please let me know if that works and we can open up a JIRA to address it. Thanks! -David...

View solution in original post

5 REPLIES 5

Re: Exception in indexingBolt of indexing topology

Rising Star

It looks like Yaf is sending some ipv6 traffic. The Yaf parser is only setup for ipv4. Try adding --ip4-only to the yaf startup script (/opt/yaf/start-yaf.sh). Please let me know if that works and we can open up a JIRA to address it. Thanks! -David...

View solution in original post

Highlighted

Re: Exception in indexingBolt of indexing topology

Explorer

Thanks,i will have a try! but i have the same problem with bro.how can i do it ?

Highlighted

Re: Exception in indexingBolt of indexing topology

Explorer

could you show me how to filter IPv6 in bro logs.

Highlighted

Re: Exception in indexingBolt of indexing topology

Explorer

btw,it does not works .

Highlighted

Re: Exception in indexingBolt of indexing topology

Explorer

i am sorry,i take a mistake , your advice works. thks