etl-parser icon indicating copy to clipboard operation
etl-parser copied to clipboard

etl2pcap AttributeError: data1

Open scottdermott opened this issue 4 years ago • 1 comments

Similar to #5

Using etl2pcap Environment : Ubuntu 20.04 Python 3.8.2

Traceback (most recent call last):
  File "/usr/local/lib/python3.8/dist-packages/construct/lib/containers.py", line 100, in __getattr__
    return self[name]
KeyError: 'data1'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/local/bin/etl2pcap", line 7, in <module>
    exec(compile(f.read(), __file__, 'exec'))
  File "/home/scott_dermott/etl-parser/bin/etl2pcap", line 82, in <module>
    main(**vars(args))
  File "/home/scott_dermott/etl-parser/bin/etl2pcap", line 63, in main
    etl_reader.parse(EtlFileLogger(output_file))
  File "/home/scott_dermott/etl-parser/etl/etl.py", line 141, in parse
    actions[event.type](event.value)
  File "/home/scott_dermott/etl-parser/etl/etl.py", line 133, in <lambda>
    "EventRecord": lambda obj: observer.on_event_record(Event(obj)),
  File "/home/scott_dermott/etl-parser/bin/etl2pcap", line 34, in on_event_record
    etw = event.parse_etw()
  File "/home/scott_dermott/etl-parser/etl/event.py", line 118, in parse_etw
    guid = EtwGuid(self.source.event_header.provider_id.data1, self.source.event_header.provider_id.data2,
  File "/usr/local/lib/python3.8/dist-packages/construct/lib/containers.py", line 102, in __getattr__
    raise AttributeError(name)
AttributeError: data1

scottdermott avatar Nov 27 '20 11:11 scottdermott

# etl2xml -i ./Windows/System32/LogFiles/WMI/Wifi.etl -o wifi.xml
Traceback (most recent call last):
  File "/usr/local/lib/python3.8/dist-packages/construct/lib/containers.py", line 91, in __getattr__
    return self[name]
KeyError: 'data1'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/local/bin/etl2xml", line 252, in <module>
    main(**vars(args))
  File "/usr/local/bin/etl2xml", line 231, in main
    etl_reader.parse(logger)
  File "/usr/local/lib/python3.8/dist-packages/etl/etl.py", line 141, in parse
    actions[event.type](event.value)
  File "/usr/local/lib/python3.8/dist-packages/etl/etl.py", line 137, in <lambda>
    "WinTraceRecord": lambda obj: observer.on_win_trace(WinTrace(obj))
  File "/usr/local/bin/etl2xml", line 212, in on_win_trace
    etw = event.parse_etw()
  File "/usr/local/lib/python3.8/dist-packages/etl/wintrace.py", line 60, in parse_etw
    guid = EtwGuid(self.source.event_header.provider_id.data1, self.source.event_header.provider_id.data2,
  File "/usr/local/lib/python3.8/dist-packages/construct/lib/containers.py", line 93, in __getattr__
    raise AttributeError(name)
AttributeError: data1

hillar avatar Aug 03 '21 10:08 hillar