logo

Knowledge Base

Access official resources from Carbon Black experts

Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Cbtaxii connector getting 404 error when running

Cbtaxii connector getting 404 error when running

Environment

Cb Response 6.1.2

cbtaxii connector 1.4.2

Symptoms

2017-08-16 11:11:05,765 Configured Site: 10.102.13.135 Path: /usr/share/cb/integrations/cbtaxii/feeds/

2017-08-16 11:11:05,799 Traceback (most recent call last):

File "cbopensource/connectors/taxii/bridge.py", line 60, in __init__

File "site-packages/cbapi/cbapi.py", line 550, in feed_enum

File "site-packages/requests/models.py", line 909, in raise_for_status

HTTPError: 404 Client Error: Not Found for url: https://127.0.0.1/api/v1/feed

2017-08-16 11:11:05,799 Traceback (most recent call last):

File "cbopensource/connectors/taxii/bridge.py", line 408, in runner

File "cbopensource/connectors/taxii/bridge.py", line 63, in __init__

SystemExit: -1

2017-08-16 16:15:05,348 Configured Site: 10.102.13.135 Path: /usr/share/cb/integrations/cbtaxii/feeds/

2017-08-16 16:15:05,413 Traceback (most recent call last):

File "cbopensource/connectors/taxii/bridge.py", line 73, in __init__

File "site-packages/cbapi/response/rest_api.py", line 66, in __init__

File "site-packages/cbapi/response/rest_api.py", line 92, in info

File "site-packages/cbapi/connection.py", line 157, in get

File "site-packages/cbapi/connection.py", line 149, in http_request

ObjectNotFoundError: Received 404 (Object Not Found) for https://127.0.0.1/api/info: <html>

<head><title>404 Not Found</title></head>

<body bgcolor="white">

<center><h1>404 Not Found</h1></center>

<hr><center>nginx/1.4.1</center>

</body>

</html>

2017-08-16 16:15:05,415 Traceback (most recent call last):

File "cbopensource/connectors/taxii/bridge.py", line 516, in runner

File "cbopensource/connectors/taxii/bridge.py", line 77, in __init__

SystemExit: -1

Cause

There is a configuration issue with the cbtaxii connector that is preventing successful communication with the feeds

Resolution

  1. Upgrade to the latest cbtaxii version
    yum update python-cbtaxii
    If the the CbOpenSource repository if it isn't already present you can run these commands first:
    cd /etc/yum.repos.d
    curl -O https://opensource.carbonblack.com/release/x86_64/CbOpenSource.repo 
    Note: You can check here for more information: https://github.com/carbonblack/cb-taxii-connector
  2. Verify that the auth_token is still valid for the cbadmin account (or another admin account) in /etc/cb/integrations/cbtaxii/cbtaxii.conf 
    Note: You can check here for more information: https://github.com/carbonblack/cb-taxii-connector 
    Problem with cbtaxii
  3. If you are using a multihome configuration with the UI over port 8443 complete the following steps:
    1. Comment out this line in /etc/cb/integrations/cbtaxii/cbtaxii.conf :
      server_port=8443
      to
      #server_port=8443
    2. Then modify this line to use port 8443:
      server_url=https://127.0.0.1:8443
  4. If the prior steps don't work, try creating a new global admin and using that API token instead
Labels (1)
Labels:
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
cmichaels
Creation Date:
‎11-13-2017
Views:
877
Contributors
logo