[
https://issues.apache.org/jira/browse/METRON-259?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15348597#comment-15348597
]
ASF GitHub Bot commented on METRON-259:
---------------------------------------
GitHub user nickwallen opened a pull request:
https://github.com/apache/incubator-metron/pull/176
METRON-259 Using 'any' for Snort's HOME_NETWORK
In some cases, Ansible is not yet aware of the 'tap0' interface when the
Snort deployment begins. This causes the deployment to fail with this error.
```
ERROR! ERROR! 'dict object' has no attribute u'ansible_tap0
```
It is not really necessary to set the HOME_NETWORK of Snort to the IP
address of the sniff interface. This needs to be customized for Snort on a
case-by-case basis for production deployments based on the target environment.
For demo and development purposes, `any` works just fine and is much simpler.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/nickwallen/incubator-metron METRON-259
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/incubator-metron/pull/176.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #176
----
commit d3faab46476d163503182702be72e3c6fa12d86b
Author: Nick Allen <[email protected]>
Date: 2016-06-24T20:38:53Z
METRON-259 Using 'any' for Snort's HOME_NETWORK
----
> ERROR! ERROR! 'dict object' has no attribute u'ansible_tap0'
> ------------------------------------------------------------
>
> Key: METRON-259
> URL: https://issues.apache.org/jira/browse/METRON-259
> Project: Metron
> Issue Type: Bug
> Reporter: Nick Allen
> Attachments: ansible (2).log
>
>
> 2016-06-24 11:10:53,994 p=66991 u=xxx | TASK [snort : Configure home
> network] ******************************************
> 2016-06-24 11:10:54,277 p=66991 u=xxx | ^[[0;31mfatal:
> [ec2-xxx-xxx-xxx-xxx.us-west-2.compute.amazonaws.com]: FAILED! => {"failed":
> true, "msg": "ERROR! ERROR! 'dict object' has no attribute
> u'ansible_tap0'"}^[[0m
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
