Processing the machine image stuck on 99%

DFIRKuiper / Kuiper

Digital Forensics Investigation Platform

760 stars 111 forks source link

Closed nikitah4x closed 2 years ago

nikitah4x commented 2 years ago

I've installed the latest version of Kuiper, and when I'm uploading a .zip output from Hoarder, the image process (parsers) is stuck at 99%.

The screenshot is attached. There are any logs or something that can help me with it??

I need help with understanding what the cause of it is.

leba-gd commented 2 years ago

Check what you see when you click on the "files" button. At the end it shows which files failed and why.

nikitah4x commented 2 years ago

Check what you see when you click on the "files" button. At the end it shows which files failed and why.

Okay great, I can see that there are 3 files that are in error state.

Recyclebin parser - 'utf8' codec can't decode byte 0xd1 in position 1: invalid continuation byte - pushed rec. 0

salehmuhaysin commented 2 years ago

for troubleshooting a parser, i recommend to run it on your machine

use the shell for celery docker sudo docker-compose exec celery /bin/bash
go to /kuiper/app/parsers/recyclebin_parser or whatevery parser you want to troubleshoot.
check the Interface Function in which file, then modify the interface file to call the interface function manully, the interface function accept two parameters (file , parser) - file is ithe file to parse, and parser is the parser name
then start troubbleshooting the issue