Pyrit 237 error

[GoogleCodeExporter]

What steps will reproduce the problem?
1. Analyze the attached file

What is the expected output? What do you see instead?

- Pyrit fail to detect a valid ESSID WPA handshake from .cap file
- Instead Aircrack-ng an Cowpatty can find it 
What version of the product are you using? On what operating system?

- Pyrit 0.3.1-dev (svn r237)

Please provide any additional information below.

I'm not the original owner of the file wscapture-01.cap

This is my output

pyrit -r /root/wscapture-01.cap attack_db
Pyrit 0.3.1-dev (svn r237) (C) 2008-2010 Lukas Lueg http://pyrit.googlecode.com
This code is distributed under the GNU General Public License v3+

Connecting to storage at 'file://'...  connected.
Parsing file '/root/wscapture-01.cap' (1/1)...
/usr/lib/python2.5/site-packages/cpyrit/pckttools.py:521: UserWarning:
Failed to compile BPF-filter (old libpcap?). Falling back to unfiltered
processing...
  warnings.warn("Failed to compile BPF-filter (old libpcap?). " \
Traceback (most recent call last):
  File "/usr/bin/pyrit", line 6, in <module>
    pyrit_cli.Pyrit_CLI().initFromArgv()
  File "/usr/lib/python2.5/site-packages/pyrit_cli.py", line 110, in
initFromArgv
    func(self, **options)
  File "/usr/lib/python2.5/site-packages/pyrit_cli.py", line 148, in new_f
    f(*args, **kwds)
  File "/usr/lib/python2.5/site-packages/pyrit_cli.py", line 777, in attack_db
    ap = self._fuzzyGetAP(self._getParser(capturefile), bssid, essid)
  File "/usr/lib/python2.5/site-packages/pyrit_cli.py", line 163, in _getParser
    parser.parse_pcapreader(cpyrit.pckttools.PcapReader(capturefile))
  File "/usr/lib/python2.5/site-packages/cpyrit/pckttools.py", line 541, in
parse_pcapreader
    for pckt in reader:
  File "/usr/lib/python2.5/site-packages/cpyrit/pckttools.py", line 436, in
next
    pckt = self.read()
  File "/usr/lib/python2.5/site-packages/cpyrit/pckttools.py", line 424, in
read
    r = _cpyrit_cpu.PcapReader.read(self)
IOError: libpcap-error while reading: truncated dump file; tried to read 10
captured bytes, only got 8

Original issue reported on code.google.com by odl...@gmail.com on 16 Mar 2010 at 7:01

[GoogleCodeExporter]

I forgot to post the attachment

Original comment by odl...@gmail.com on 16 Mar 2010 at 7:09

[GoogleCodeExporter]

the file is cut off. You can "repair" it by using Pyrit's 'stripLive':

pyrit -r wscapture-01.cap -o wscapture-01_stripped.cap stripLive

You will get the same error, but you will also get a new file to work with

Original comment by lukas.l...@gmail.com on 16 Mar 2010 at 7:14

• Changed state: WontFix

[GoogleCodeExporter]

Ok I have now a file to work
But what about the error ?

Original comment by odl...@gmail.com on 16 Mar 2010 at 7:22

[GoogleCodeExporter]

The error is correctly passed from libpcap. Your file is truncated

Original comment by lukas.l...@gmail.com on 16 Mar 2010 at 7:27

[GoogleCodeExporter]

Thanks

Original comment by odl...@gmail.com on 16 Mar 2010 at 7:30