search

cert-ee / cuckoo3

Cuckoo3 is a Python 3 open source automated malware analysis system.
https://cuckoo-hatch.cert.ee
European Union Public License 1.2
627 stars 80 forks source link

Agent not online within timeout of 120 seconds. Could not connect to: x.x.x.x:8000 within timeout of 120 seconds. #88

Open git-SwitchBlade opened 8 months ago

git-SwitchBlade commented 8 months ago

I have followed two blogs while installing cuckoo3 sandbox, which are 1 & 2, but when I submit a file for analysis, I get the following error.

cuckoo-error

I am using a Ubuntu Virtual Machine for installation of cuckoo sandbox, and yes I have enabled nested virtualization.

The machine is created but it couldn't connect to the agent, I have properly configured br0 using the following steps:-

sudo /opt/cuckoo3/venv/bin/vmcloak-qemubridge br0 192.168.30.1/24
sudo mkdir -p /etc/qemu
echo 'allow br0' | sudo tee /etc/qemu/bridge.conf
sudo chmod u+s /usr/lib/qemu/qemu-bridge-helper

Any help will be appreciated, Thanks

Cryss76 commented 1 month ago

The connection issue is due to the Cuckoo instance and the analysis VM being in different networks. Cuckoo is in 192.168.30.0/24 (as seen in the code snippet) and the analysis VM is in 192.168.50.1/24.