simsong
tcpflow: [scan_python] Cannot call python becase no provided module/function.
I've built tcpflow 1.5.0 on CentOS 7:
./configure && make && sudo make install
However when I try to run:
tcpflow -a -o outdir -Fk -r test.pcap
I get the following error (repeated until I kill it) the test.pcap is ~50MB in size.
tcpflow: [scan_python] Cannot call python becase no provided module/function.
Please use arguments -S py_module=module -S py_function=foo
tcpflow: [scan_python] Cannot call python becase no provided module/function.
Please use arguments -S py_module=module -S py_function=foo
Neat. Looks like scan_python needs an exit added. Do you want to try to put it in?
Do you think that Scan_python should not come on when -a is specified? Do you want it?
Sent from my phone.
On Jan 29, 2020, at 3:21 AM, Graham Russell [email protected] wrote:
I've built tcpflow on CentOS 7: ./configure && make && sudo make install
However when I try to run: tcpflow -a -o outdir -Fk -r test.pcap
I get the following error (repeated until I kill it) the test.pcap is ~50MB in size.
tcpflow: [scan_python] Cannot call python becase no provided module/function. Please use arguments -S py_module=module -S py_function=foo tcpflow: [scan_python] Cannot call python becase no provided module/function. Please use arguments -S py_module=module -S py_function=foo — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe.
So, my use case it that I want to take a PCAP file and split out all the flows into separate PCAP files.
Can this be done with TCPFlow?
I don't think I actually need the -a for my use case. If try tcpflow -o outdir -r test.pcap I get lots of files inside outdir but none seem to be valid PCAP files.
A suggestion for improvement would be to have more examples in the docs, I find it the best way to learn what the tool can do.
tcpflow does not sort pcap files into different flows.
On Jan 29, 2020, at 6:01 AM, Graham Russell [email protected] wrote:
So, my use case it that I want to take a PCAP file and split out all the flows into separate PCAP files.
Can this be done with TCPFlow?
A suggestion for improvement would be to have more examples in the docs; I don't think I actually need the -a for my use case. If try tcpflow -o outdir -r test.pcap I get lots of files inside outdir but none seem to be valid PCAP files.
— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/simsong/tcpflow/issues/214?email_source=notifications&email_token=AAMFHLEMB2E72OEB3X32GZDRAFOXTA5CNFSM4KNAPCFKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEKGZJJI#issuecomment-579703973, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAMFHLCZFEWS4XB75VNWDTLRAFOXTANCNFSM4KNAPCFA.
Yes still found a bug! I need to fix it.
Sent from my phone.
On Jan 29, 2020, at 6:29 AM, Graham Russell [email protected] wrote:
Closed #214.
— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.