search

kevoreilly / CAPEv2

Malware Configuration And Payload Extraction
https://capesandbox.com/analysis/
Other
2.02k stars 425 forks source link

CAPE can't find the directory with logs #2230

Closed MikeEffect closed 4 months ago

MikeEffect commented 4 months ago

About accounts on capesandbox.com

This is open source and you are getting free support so be friendly!

Prerequisites

Please answer the following questions for yourself before submitting an issue.

Expected Behavior

The reporting module should write logs to the logs directory

Current Behavior

  1. There is no "logs" directory in /opt/CAPEv2/storage/analyzes/ID/.
  2. During URL analysis, directories are created: "network", "reports", "scripts", "shots" and files: "dump.pcap, dump_sorted.pcap".

Failure Information (for bugs)

Steps to Reproduce

  1. Start URL analysis (or file analysis)
  2. Wait for the end of the analysis

Context

Question Answer
Git commit -
OS version Ubuntu 22.04 - host, Windows 10 21H2 - guest, KVM - hypervisor

Failure Logs

Jul 15 17:19:10 san-vm python3[9562]: 2024-07-15 17:19:10,602 [lib.cuckoo.core.guest] INFO: Task #54: End of analysis reached! (id=win10, ip=192.168.122.105)
Jul 15 17:19:10 san-vm python3[9562]: 2024-07-15 17:19:10,691 [lib.cuckoo.core.analysis_manager] INFO: Task #54: Disabled route 'internet'
Jul 15 17:19:11 san-vm python3[9562]: 2024-07-15 17:19:11,687 [lib.cuckoo.core.analysis_manager] INFO: Task #54: Completed analysis successfully.
Jul 15 17:19:11 san-vm python3[9562]: 2024-07-15 17:19:11,713 [lib.cuckoo.core.analysis_manager] INFO: Task #54: analysis procedure completed
Jul 15 17:19:14 san-vm python3[9560]: 2024-07-15 17:19:14,567 [root] INFO: Processing analysis data for Task #54
Jul 15 17:19:14 san-vm python3[11675]: 2024-07-15 17:19:14,722 [Task 54] [modules.processing.behavior] WARNING: Analysis results folder does not exist at path "/opt/CAPEv2/storage/analyses/54/logs"
Jul 15 17:19:15 san-vm python3[11675]: 2024-07-15 17:19:15,037 [Task 54] [lib.cuckoo.core.plugins] INFO: Logs folder doesn't exist, maybe something with with analyzer folder, any change?
Jul 15 17:19:15 san-vm python3[11696]: QStandardPaths: XDG_RUNTIME_DIR not set, defaulting to '/tmp/runtime-cape'
Jul 15 17:19:16 san-vm python3[9560]: 2024-07-15 17:19:16,729 [root] INFO: Reports generation completed for Task #54
doomedraven commented 4 months ago

i would suggest to read the /opt/CAPEv2/storage/analyses/54/analysis.log to see what is wrong with your analysis

MikeEffect commented 4 months ago

i would suggest to read the /opt/CAPEv2/storage/analyses/54/analysis.log to see what is wrong with your analysis

Unfortunately, the analysis.log file is also not being created :(

doomedraven commented 4 months ago

Well that means that your cape is not properly build

YungBinary commented 2 weeks ago

I want to report that I am having the same issue as @MikeEffect and see the following in process.log -

2024-11-11 16:24:22,764 [Task 68] [modules.processing.behavior] WARNING: Analysis results folder does not exist at path "/opt/CAPEv2/storage/analyses/68/logs"
2024-11-11 16:24:22,767 [Task 68] [lib.cuckoo.core.plugins] INFO: Logs folder doesn't exist, maybe something with with analyzer folder, any change?
doomedraven commented 2 weeks ago

Do you have vm IP set statically? Do you have logs of cuckoo.log?

El lun, 11 nov 2024, 17:34, YungBinary @.***> escribió:

I want to report that I am having the same issue as @MikeEffect https://github.com/MikeEffect see the following logs:

2024-11-11 16:24:22,764 [Task 68] [modules.processing.behavior] WARNING: Analysis results folder does not exist at path "/opt/CAPEv2/storage/analyses/68/logs" 2024-11-11 16:24:22,767 [Task 68] [lib.cuckoo.core.plugins] INFO: Logs folder doesn't exist, maybe something with with analyzer folder, any change?

— Reply to this email directly, view it on GitHub https://github.com/kevoreilly/CAPEv2/issues/2230#issuecomment-2468586834, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAOFH37DD5GW7LSBIY34HKT2ADMBRAVCNFSM6AAAAABK4MAUZGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDINRYGU4DMOBTGQ . You are receiving this because you modified the open/close state.Message ID: @.***>

YungBinary commented 2 weeks ago

Do you have vm IP set statically? Do you have logs of cuckoo.log? El lun, 11 nov 2024, 17:34, YungBinary @.> escribió: … I want to report that I am having the same issue as @MikeEffect https://github.com/MikeEffect see the following logs: 2024-11-11 16:24:22,764 [Task 68] [modules.processing.behavior] WARNING: Analysis results folder does not exist at path "/opt/CAPEv2/storage/analyses/68/logs" 2024-11-11 16:24:22,767 [Task 68] [lib.cuckoo.core.plugins] INFO: Logs folder doesn't exist, maybe something with with analyzer folder, any change? — Reply to this email directly, view it on GitHub <#2230 (comment)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAOFH37DD5GW7LSBIY34HKT2ADMBRAVCNFSM6AAAAABK4MAUZGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDINRYGU4DMOBTGQ . You are receiving this because you modified the open/close state.Message ID: @.>

Resolved! The issue wass because I was using a non-standard port in my configurations. I was using something other than 2042! Now it's all working.