EVE ng PRO and wireshark save issue

Moderator: mike

Post Reply
verma-rohit
Posts: 31
Joined: Wed Nov 07, 2018 3:03 pm

EVE ng PRO and wireshark save issue

Post by verma-rohit » Fri Feb 07, 2020 4:45 am

Hi,
I am unable to save any captured in wireshark. When i try to save i get to a file location called thinclient_drives but a save would result in error as "Bad file descriptor" ?

Uldis (UD)
Posts: 5067
Joined: Wed Mar 15, 2017 4:44 pm
Location: London
Contact:

Re: EVE ng PRO and wireshark save issue

Post by Uldis (UD) » Fri Feb 07, 2020 9:48 pm

Please read carefull EVE Cookbook section 12.1.
Step 2 and step 3

It is specific path where to save files sir

https://www.eve-ng.net/index.php/docume ... -cookbook/

verma-rohit
Posts: 31
Joined: Wed Nov 07, 2018 3:03 pm

Re: EVE ng PRO and wireshark save issue

Post by verma-rohit » Mon Feb 10, 2020 2:47 pm

Hi Uldis,
yes I have gone through the section in cook book and apprently the save location is :
/nobody/thinclient_drives/GUACFS/Download

but when i try to save I cannot see any folder in thinclient_drives. I have attached the screen shot for better clarity.
You do not have the required permissions to view the files attached to this post.

Uldis (UD)
Posts: 5067
Joined: Wed Mar 15, 2017 4:44 pm
Location: London
Contact:

Re: EVE ng PRO and wireshark save issue

Post by Uldis (UD) » Mon Feb 10, 2020 5:41 pm

on same lab open another capture, and try save. If not ok
It looks like some docker glitch try reboot eve
and try this operation again
If you have this issue again, report me

verma-rohit
Posts: 31
Joined: Wed Nov 07, 2018 3:03 pm

Re: EVE ng PRO and wireshark save issue

Post by verma-rohit » Tue Feb 11, 2020 4:56 pm

Hi Uldis,
I am not using Wireshark docker though. Right-click on node and capture interface and capture. I moved from firefox to chrome and the issue seems to have sorted out. I will test it again tomorrow and report the outcome. Thanks for your help.

Uldis (UD)
Posts: 5067
Joined: Wed Mar 15, 2017 4:44 pm
Location: London
Contact:

Re: EVE ng PRO and wireshark save issue

Post by Uldis (UD) » Tue Feb 11, 2020 9:54 pm

EVE PRO is using automatically embeded docker Wireshark

Post Reply