pv_monitor errors with unable to negotiate: no matching MAC found

Products

• Security Analytics

Issue/Introduction

After upgrading to 8.2.5, when trying to run pv_monitor, it errors out with a key exchange error.

Unable to negotiate with 2001:db8:ffff:ffff port 22: no matching MAC found. Their offer: [email protected],[email protected]

Environment

Release:  8.2.5 or earlier

Resolution

To fix this issue,

Edit the /etc/ssh/ssh_config file and go down to the MACs line (around line 41).  It should have this listed:

MACs hmac-sha1,hmac-sha2-256,hmac-sha2-512

On that same line, add the new ciphers so that it looks like this:

MACs hmac-sha1,hmac-sha2-256,hmac-sha2-512,[email protected],[email protected]

Save the file and then reestablish your SSH session and try running pv_monitor again.

These extra ciphers will be added by default in Security Analytics version 8.2.6.