ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

pv_monitor errors with unable to negotiate: no matching MAC found

book

Article ID: 239642

calendar_today

Updated On:

Products

Security Analytics

Issue/Introduction

After upgrading to 8.2.5, when trying to run pv_monitor, it errors out with a key exchange error.

Unable to negotiate with 2001:480:b0:f002:0:3:1:43 port 22: no matching MAC found. Their offer: [email protected],[email protected]

Environment

Release:  8.2.5 or earlier

Resolution

To fix this issue,

Edit the /etc/ssh/ssh_config file and go down to the MACs line (around line 41).  It should have this listed:

MACs hmac-sha1,hmac-sha2-256,hmac-sha2-512

On that same line, add the new ciphers so that it looks like this:

MACs hmac-sha1,hmac-sha2-256,hmac-sha2-512,[email protected],[email protected]

Save the file and then reestablish your SSH session and try running pv_monitor again.

These extra ciphers will be added by default in Security Analytics version 8.2.6.