Xplico.org
http://forum.xplico.org/

cannot decode pcaps
http://forum.xplico.org/viewtopic.php?f=3&t=482
Page 1 of 2

Author:  vsharm [ Wed Jul 13, 2011 6:36 pm ]
Post subject:  cannot decode pcaps

Dear All,

I have reinstalled a new version of xplico (latest 0.6.3) on a ubuntu 10.04 Lucid machine. I had previously installed xplico 0.5.8 on this machine and it was functioning nicely.


But at present, after compiling successfully, I am not able to decode pcaps.

When I try to upload any pcap (including the xplico sample pcaps) using the php XI interface, system does not decode any data and shows EMPTY as the status.

I also notice that the pol_1 and sol_1 folders are not formed even after forming a case and session.

It seems to me that the problem is because of the python3 packages.
I have installed the python3-all package.

the other python3-httplib2 package is not available for lucid ubunutu 10.04.

Please help

Author:  gianluca.costa [ Thu Jul 14, 2011 6:19 am ]
Post subject:  Re: cannot decode pcaps

Yes, the problem is python3-httplib2.
You can install python3-httplib2 manually.
tgz: http://code.google.com/p/httplib2/downloads/list
install: http://code.google.com/p/httplib2/source/browse/README

Author:  vsharm [ Thu Jul 14, 2011 8:54 am ]
Post subject:  Re: cannot decode pcaps

Dear Gianluca,

I installed the python3-httplib2 successfully.

I recompiled xplico and tried to decode the sample pcap file again.
Same problem is there.

It is still not allowing me to decode pcap data.

The screen STATUS shows "EMPTY" and then when I upload a pcap, it shows "File uploaded start decoding" but after some time the status become "EMPTY" again.

I have already run chmod -R 777 /opt/xplico.
Please help.

VS

Author:  vsharm [ Thu Jul 14, 2011 8:56 am ]
Post subject:  Re: cannot decode pcaps

Dear Gianluca
Another thing,

When I use the Command Line Interface it is allowing me to decode successfully

The problem is when I use the php XI interface

VS

Author:  vsharm [ Thu Jul 14, 2011 9:01 am ]
Post subject:  Re: cannot decode pcaps

Dear Gianluca,
I think the httplib2 is not correctly configured.

when I run the python script "/opt/xplico/script/session_mng.pyc -n "AP home" "April" "

The console gives an error
File "session_mng.py", line 15, in <module>
ImportError: No module named httplib2


The link that you sent me, I installed the python3-httplib2 package (tar.gz) from that. Can you please specify the module that I need to install from the link that you sent me

VS

Author:  gianluca.costa [ Thu Jul 14, 2011 12:25 pm ]
Post subject:  Re: cannot decode pcaps

session_mng.pyc script is used only with XI. Therefore the problem depends only by httplib2.
Step by step installation ( = workaround) :
  • download httplib2 for python3: http://httplib2.googlecode.com/files/ht ... 7.1.tar.gz
  • unpack it:
    Code:
    mkdir -p /tmp/sniffer
    cd  /tmp/sniffer
    tar xzvf httplib2-0.7.1.tar.gz
  • "install" httplib2 into xplico installation:
    Code:
    cd /opt/xplico/script/
    sudo mv /tmp/sniffer/httplib2-0.7.1/python3/httplib2 .
  • test it:
    Code:
    /opt/xplico/script/session_mng.pyc
  • if it works ... be happy ;)

Ciao
Gianluca

Author:  vsharm [ Fri Jul 15, 2011 8:08 am ]
Post subject:  Re: cannot decode pcaps

Dear Gianluca,

The python script /opt/xplico/script/session_mng.pyc worked and it created a session successfully

However, when I try to execute the same from XI (creation of a new session and a new case) it still does not create the folders (pol/sol) as required.

This is why I still cannot decode pcap data
I just moved the python3/httplib2 folder into the /opt/xplico/script directory.

DO i need to also run "python setup.py install" to install the package.

I have already given chmod 777 to /opt/xplico folders

Please help
VS

Author:  gianluca.costa [ Fri Jul 15, 2011 1:19 pm ]
Post subject:  Re: cannot decode pcaps

The XI calls session_mng.pyc but only at the session creation. I tried, and all work fine for me if I copy (with chmod 777 -R) the httplib2 in /opt/xplico/script directory.Obviously to test I removed the deb package of the library.

Author:  vsharm [ Fri Jul 15, 2011 2:26 pm ]
Post subject:  Re: cannot decode pcaps

DONE. thanks
VS

Author:  schwammespalken [ Wed Oct 26, 2011 9:28 pm ]
Post subject:  Re: cannot decode pcaps

Same Problem, copy httplib2 doesn't work.

Traceback (most recent call last):
File "session_mng.py", line 15, in <module>
ImportError: No module named httplib2


Any Idea?

Page 1 of 2 All times are UTC
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/