-
Notifications
You must be signed in to change notification settings - Fork 239
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
tcpflow: [scan_python] Cannot call python becase no provided module/function. #214
Comments
Neat. Looks like scan_python needs an exit added. Do you want to try to put it in?
Do you think that Scan_python should not come on when -a is specified? Do you want it?
----
Sent from my phone.
On Jan 29, 2020, at 3:21 AM, Graham Russell ***@***.***> wrote:
I've built tcpflow on CentOS 7:
./configure && make && sudo make install
However when I try to run:
tcpflow -a -o outdir -Fk -r test.pcap
I get the following error (repeated until I kill it) the test.pcap is ~50MB in size.
tcpflow: [scan_python] Cannot call python becase no provided module/function.
Please use arguments -S py_module=module -S py_function=foo
tcpflow: [scan_python] Cannot call python becase no provided module/function.
Please use arguments -S py_module=module -S py_function=foo
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or unsubscribe.
|
So, my use case it that I want to take a PCAP file and split out all the flows into separate PCAP files. Can this be done with TCPFlow? I don't think I actually need the A suggestion for improvement would be to have more examples in the docs, I find it the best way to learn what the tool can do. |
tcpflow does not sort pcap files into different flows.
… On Jan 29, 2020, at 6:01 AM, Graham Russell ***@***.***> wrote:
So, my use case it that I want to take a PCAP file and split out all the flows into separate PCAP files.
Can this be done with TCPFlow?
A suggestion for improvement would be to have more examples in the docs; I don't think I actually need the -a for my use case. If try tcpflow -o outdir -r test.pcap I get lots of files inside outdir but none seem to be valid PCAP files.
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub <#214?email_source=notifications&email_token=AAMFHLEMB2E72OEB3X32GZDRAFOXTA5CNFSM4KNAPCFKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEKGZJJI#issuecomment-579703973>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAMFHLCZFEWS4XB75VNWDTLRAFOXTANCNFSM4KNAPCFA>.
|
Ok, thank you for the fast replies and for clarifying! |
Yes still found a bug! I need to fix it.
----
Sent from my phone.
On Jan 29, 2020, at 6:29 AM, Graham Russell ***@***.***> wrote:
Closed #214.
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub, or unsubscribe.
|
This issue must still be fixed. |
I've built tcpflow 1.5.0 on CentOS 7:
./configure && make && sudo make install
However when I try to run:
tcpflow -a -o outdir -Fk -r test.pcap
I get the following error (repeated until I kill it) the test.pcap is ~50MB in size.
The text was updated successfully, but these errors were encountered: