tcpflow: [scan_python] Cannot call python becase no provided module/function.

[ham1]

I've built tcpflow 1.5.0 on CentOS 7:
./configure && make && sudo make install

However when I try to run:
tcpflow -a -o outdir -Fk -r test.pcap

I get the following error (repeated until I kill it) the test.pcap is ~50MB in size.

tcpflow: [scan_python] Cannot call python becase no provided module/function.
                                Please use arguments -S py_module=module -S py_function=foo
tcpflow: [scan_python] Cannot call python becase no provided module/function.
                                Please use arguments -S py_module=module -S py_function=foo

[simsong]

Neat. Looks like scan_python needs an exit added. Do you want to try to put it in? Do you think that Scan_python should not come on when -a is specified? Do you want it?

---- Sent from my phone.

On Jan 29, 2020, at 3:21 AM, Graham Russell ***@***.***> wrote:

 I've built tcpflow on CentOS 7: ./configure && make && sudo make install However when I try to run: tcpflow -a -o outdir -Fk -r test.pcap I get the following error (repeated until I kill it) the test.pcap is ~50MB in size. tcpflow: [scan_python] Cannot call python becase no provided module/function. Please use arguments -S py_module=module -S py_function=foo tcpflow: [scan_python] Cannot call python becase no provided module/function. Please use arguments -S py_module=module -S py_function=foo — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe.

[ham1]

So, my use case it that I want to take a PCAP file and split out all the flows into separate PCAP files.

Can this be done with TCPFlow?

I don't think I actually need the -a for my use case. If try tcpflow -o outdir -r test.pcap I get lots of files inside outdir but none seem to be valid PCAP files.

A suggestion for improvement would be to have more examples in the docs, I find it the best way to learn what the tool can do.

[simsong]

tcpflow does not sort pcap files into different flows.

…

On Jan 29, 2020, at 6:01 AM, Graham Russell ***@***.***> wrote: So, my use case it that I want to take a PCAP file and split out all the flows into separate PCAP files. Can this be done with TCPFlow? A suggestion for improvement would be to have more examples in the docs; I don't think I actually need the -a for my use case. If try tcpflow -o outdir -r test.pcap I get lots of files inside outdir but none seem to be valid PCAP files. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#214?email_source=notifications&email_token=AAMFHLEMB2E72OEB3X32GZDRAFOXTA5CNFSM4KNAPCFKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEKGZJJI#issuecomment-579703973>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAMFHLCZFEWS4XB75VNWDTLRAFOXTANCNFSM4KNAPCFA>.

[ham1]

Ok, thank you for the fast replies and for clarifying!

[simsong]

Yes still found a bug! I need to fix it.

---- Sent from my phone.

On Jan 29, 2020, at 6:29 AM, Graham Russell ***@***.***> wrote:

 Closed #214. — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

[simsong]

This issue must still be fixed.