topic Re: Error on maclookup command -- netaddr not found. in All Apps and Add-ons

Error on maclookup command -- netaddr not found.

nysdanharrison — Tue, 17 Sep 2019 14:55:40 GMT

Trying to use the maclookup command offline and getting the error:
command="maclookup",: failed to use the netaddr module!
Using version 2.5.2 to TA-maclookup on splunk 7.2.5.1. Have installed the python netaddr module on the system python and have rebooted, still not working. Works in online mode, but that's not a long-term solution that will work in our enviornment.

Re: Error on maclookup command -- netaddr not found.

chris — Tue, 12 Nov 2019 13:17:39 GMT

We have the same issue. I think the problem is, that the TA is not designed to fail in a safe way. The error you see in the ui is rather generic.

You can easily change the behaviour by editing the maclookup.py file.

        except Exception as e:
            logger.error( 'failed to use the netaddr module!' )

            #splunk.Intersplunk.generateErrorResults(': failed to use the netaddr module!')
            #exit()

            line['vendor']="not found"
            line['maclookup_error']=str(e)
            list.append(line)

You will get a hint about the error in the maclookup_error field, if the lookup is not succesful in offline mode.
@MuS: You wouldn't happen to have time to change the behaviour?

Regards
Chris

Re: Error on maclookup command -- netaddr not found.

MuS — Tue, 12 Nov 2019 19:19:16 GMT

Sorry I missed that question in the first place 😞

I will have a look today

cheers, MuS

Re: Error on maclookup command -- netaddr not found.

MuS — Tue, 12 Nov 2019 22:21:15 GMT

Updated version on https://github.com/M-u-S/TA-maclookup available, apps.splunk.com will take a few hours/days 😉

cheers, MuS

Re: Error on maclookup command -- netaddr not found.

chris — Tue, 19 Nov 2019 05:49:24 GMT

Thank you.