Skip to content

rayhunter-check: can not read the PCAP file from QCSuper although no Encapsulation #730

@arifkyi

Description

@arifkyi

Hello Team,

we tried to feed the pcap file the result from QCsuper,
but we got error so. many time although no encapsulation and no need strip header IP (please refer to issue #719 to compare with PCAP file from SCAT that need manual strip header)

Qcrifky12.pcap.zip

Details:

How i run:

./rayhunter-check -p ~/Desktop/Qcrifky12.pcap

Expected :

NNN messages analyzed, 0 warnings, N messages skipped

Actual:

INFO  [rayhunter_check] **** Beginning analysis of Qcrifky12.pcap

thread 'main' (28603) panicked at check/src/main.rs:98:10:
**failed to read PCAP file: IoError(Kind(UnexpectedEof))**
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

Qcrifky12.pcap.zip

Looking forward for your kind help, thank you very much in advance.

br,
Rifky

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingparsingissues related to parsing traffic

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions