simsong / bulk_extractor

This is the development tree. Production downloads are at:
https://github.com/simsong/bulk_extractor/releases
Other
1.11k stars 187 forks source link

net scanners to not run under win32/wine #263

Open simsong opened 3 years ago

simsong commented 3 years ago

bulk_extractor 2.0 is now almost completely running under WINE when compiled with mingw64. The only part that is not working is the net scanners, which is probably because of the #include files. Here are the errors:

================ validate  ntlm1.pcap (outdir: "C:\\users\\user\\Temp\\be_tmpdd693cef68766a1f") ================
opening "Z:\\home\\user\\bulk_extractor\\src\\tests\\ntlm1.pcap"
All data are read; waiting for threads to finish...
Average consumer time spent waiting: 0 sec.
Phase 3. Uniquifying and recombining wordlist
"C:\\users\\user\\Temp\\be_tmpdd693cef68766a1f\\ip.txt":# BANNER FILE NOT PROVIDED (-b option)
"C:\\users\\user\\Temp\\be_tmpdd693cef68766a1f\\ip.txt":# BULK_EXTRACTOR-Version: 2.0.0-dev
"C:\\users\\user\\Temp\\be_tmpdd693cef68766a1f\\ip.txt":# Feature-Recorder: ip
"C:\\users\\user\\Temp\\be_tmpdd693cef68766a1f\\ip.txt":# Filename: Z:\home\user\bulk_extractor\src\tests\ntlm1.pcap
"C:\\users\\user\\Temp\\be_tmpdd693cef68766a1f\\ip.txt":# Feature-File-Version: 1.1
"C:\\users\\user\\Temp\\be_tmpdd693cef68766a1f\\ip.txt":0       0xd4,0xc3,0xb2,0xa1     TCPDUMP file
"C:\\users\\user\\Temp\\be_tmpdd693cef68766a1f\\ip.txt":40      inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmpdd693cef68766a1f\\ip.txt":40      inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmpdd693cef68766a1f\\ip.txt" did not find pos=(40|0) feature=192.168.0.91 context=struct ip L (src) cksum-ok
-----------------------------------------------------------------------------------------------------------------------
test_net1
-----------------------------------------------------------------------------------------------------------------------
test_be.cpp:759
.......................................................................................................................

test_be.cpp:632: FAILED:
  REQUIRE( found )
with expansion:
  false

================ validate  ntlm2.pcap (outdir: "C:\\users\\user\\Temp\\be_tmp6a383edaafcbf266") ================
opening "Z:\\home\\user\\bulk_extractor\\src\\tests\\ntlm2.pcap"
All data are read; waiting for threads to finish...
Average consumer time spent waiting: 0 sec.
Phase 3. Uniquifying and recombining wordlist
"C:\\users\\user\\Temp\\be_tmp6a383edaafcbf266\\ip.txt":# BANNER FILE NOT PROVIDED (-b option)
"C:\\users\\user\\Temp\\be_tmp6a383edaafcbf266\\ip.txt":# BULK_EXTRACTOR-Version: 2.0.0-dev
"C:\\users\\user\\Temp\\be_tmp6a383edaafcbf266\\ip.txt":# Feature-Recorder: ip
"C:\\users\\user\\Temp\\be_tmp6a383edaafcbf266\\ip.txt":# Filename: Z:\home\user\bulk_extractor\src\tests\ntlm2.pcap
"C:\\users\\user\\Temp\\be_tmp6a383edaafcbf266\\ip.txt":# Feature-File-Version: 1.1
"C:\\users\\user\\Temp\\be_tmp6a383edaafcbf266\\ip.txt":0       0xd4,0xc3,0xb2,0xa1     TCPDUMP file
"C:\\users\\user\\Temp\\be_tmp6a383edaafcbf266\\ip.txt":40      inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp6a383edaafcbf266\\ip.txt":40      inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp6a383edaafcbf266\\ip.txt":482     inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp6a383edaafcbf266\\ip.txt":482     inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp6a383edaafcbf266\\ip.txt" did not find pos=(40|0) feature=192.168.0.91 context=struct ip L (src) cksum-ok
-----------------------------------------------------------------------------------------------------------------------
test_net2
-----------------------------------------------------------------------------------------------------------------------
test_be.cpp:771
.......................................................................................................................

test_be.cpp:632: FAILED:
  REQUIRE( found )
with expansion:
  false

================ validate  ntlm3.pcap (outdir: "C:\\users\\user\\Temp\\be_tmp3d64ead1078ad0c1") ================
opening "Z:\\home\\user\\bulk_extractor\\src\\tests\\ntlm3.pcap"
All data are read; waiting for threads to finish...
Average consumer time spent waiting: 0 sec.
Phase 3. Uniquifying and recombining wordlist
"C:\\users\\user\\Temp\\be_tmp3d64ead1078ad0c1\\ip.txt":# BANNER FILE NOT PROVIDED (-b option)
"C:\\users\\user\\Temp\\be_tmp3d64ead1078ad0c1\\ip.txt":# BULK_EXTRACTOR-Version: 2.0.0-dev
"C:\\users\\user\\Temp\\be_tmp3d64ead1078ad0c1\\ip.txt":# Feature-Recorder: ip
"C:\\users\\user\\Temp\\be_tmp3d64ead1078ad0c1\\ip.txt":# Filename: Z:\home\user\bulk_extractor\src\tests\ntlm3.pcap
"C:\\users\\user\\Temp\\be_tmp3d64ead1078ad0c1\\ip.txt":# Feature-File-Version: 1.1
"C:\\users\\user\\Temp\\be_tmp3d64ead1078ad0c1\\ip.txt":0       0xd4,0xc3,0xb2,0xa1     TCPDUMP file
"C:\\users\\user\\Temp\\be_tmp3d64ead1078ad0c1\\ip.txt":40      inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp3d64ead1078ad0c1\\ip.txt":40      inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp3d64ead1078ad0c1\\ip.txt":482     inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp3d64ead1078ad0c1\\ip.txt":482     inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp3d64ead1078ad0c1\\ip.txt":1010    inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp3d64ead1078ad0c1\\ip.txt":1010    inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp3d64ead1078ad0c1\\ip.txt" did not find pos=(40|0) feature=192.168.0.91 context=struct ip L (src) cksum-ok
-----------------------------------------------------------------------------------------------------------------------
test_net3
-----------------------------------------------------------------------------------------------------------------------
test_be.cpp:785
.......................................................................................................................

test_be.cpp:632: FAILED:
  REQUIRE( found )
with expansion:
  false

================ validate  ntlm3.pcap (outdir: "C:\\users\\user\\Temp\\be_tmpf634df8f55a5013") ================
opening "C:\\users\\user\\Temp\\be_tmpf634df8f55a5013\\offset_file"
All data are read; waiting for threads to finish...
Average consumer time spent waiting: 0 sec.
Phase 3. Uniquifying and recombining wordlist
"C:\\users\\user\\Temp\\be_tmpf634df8f55a5013\\ip.txt":# BANNER FILE NOT PROVIDED (-b option)
"C:\\users\\user\\Temp\\be_tmpf634df8f55a5013\\ip.txt":# BULK_EXTRACTOR-Version: 2.0.0-dev
"C:\\users\\user\\Temp\\be_tmpf634df8f55a5013\\ip.txt":# Feature-Recorder: ip
"C:\\users\\user\\Temp\\be_tmpf634df8f55a5013\\ip.txt":# Filename: C:\users\user\Temp\be_tmpf634df8f55a5013\offset_file
"C:\\users\\user\\Temp\\be_tmpf634df8f55a5013\\ip.txt":# Feature-File-Version: 1.1
"C:\\users\\user\\Temp\\be_tmpf634df8f55a5013\\ip.txt":0        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmpf634df8f55a5013\\ip.txt":0        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmpf634df8f55a5013\\ip.txt":0        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmpf634df8f55a5013\\ip.txt":0        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmpf634df8f55a5013\\ip.txt" did not find pos=(30|0) feature=192.168.0.91 context=struct ip L (src) cksum-ok
-----------------------------------------------------------------------------------------------------------------------
test_net3+10
-----------------------------------------------------------------------------------------------------------------------
test_be.cpp:800
.......................................................................................................................

test_be.cpp:632: FAILED:
  REQUIRE( found )
with expansion:
  false

================ validate  ntlm3.pcap (outdir: "C:\\users\\user\\Temp\\be_tmpb1ba1f8a0d65f3c") ================
opening "C:\\users\\user\\Temp\\be_tmpb1ba1f8a0d65f3c\\offset_file"
All data are read; waiting for threads to finish...
Average consumer time spent waiting: 0 sec.
Phase 3. Uniquifying and recombining wordlist
"C:\\users\\user\\Temp\\be_tmpb1ba1f8a0d65f3c\\ip.txt":# BANNER FILE NOT PROVIDED (-b option)
"C:\\users\\user\\Temp\\be_tmpb1ba1f8a0d65f3c\\ip.txt":# BULK_EXTRACTOR-Version: 2.0.0-dev
"C:\\users\\user\\Temp\\be_tmpb1ba1f8a0d65f3c\\ip.txt":# Feature-Recorder: ip
"C:\\users\\user\\Temp\\be_tmpb1ba1f8a0d65f3c\\ip.txt":# Filename: C:\users\user\Temp\be_tmpb1ba1f8a0d65f3c\offset_file
"C:\\users\\user\\Temp\\be_tmpb1ba1f8a0d65f3c\\ip.txt":# Feature-File-Version: 1.1
"C:\\users\\user\\Temp\\be_tmpb1ba1f8a0d65f3c\\ip.txt":0        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmpb1ba1f8a0d65f3c\\ip.txt":0        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmpb1ba1f8a0d65f3c\\ip.txt":0        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmpb1ba1f8a0d65f3c\\ip.txt":0        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmpb1ba1f8a0d65f3c\\ip.txt" did not find pos=(16|0) feature=192.168.0.91 context=struct ip L (src) cksum-ok
-----------------------------------------------------------------------------------------------------------------------
test_net3+24
-----------------------------------------------------------------------------------------------------------------------
test_be.cpp:817
.......................................................................................................................

test_be.cpp:632: FAILED:
  REQUIRE( found )
with expansion:
  false

================ validate  ntlm80.pcap (outdir: "C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831") ================
opening "Z:\\home\\user\\bulk_extractor\\src\\tests\\ntlm80.pcap"
All data are read; waiting for threads to finish...
Average consumer time spent waiting: 0 sec.
Phase 3. Uniquifying and recombining wordlist
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":# BANNER FILE NOT PROVIDED (-b option)
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":# BULK_EXTRACTOR-Version: 2.0.0-dev
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":# Feature-Recorder: ip
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":# Filename: Z:\home\user\bulk_extractor\src\tests\ntlm80.pcap
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":# Feature-File-Version: 1.1
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":0       0xd4,0xc3,0xb2,0xa1     TCPDUMP file
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":40      inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":40      inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":482     inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":482     inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":1010    inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":1010    inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":1541    inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":1541    inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":2240    inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":2240    inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":2974    inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":2974    inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":3451    inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":3451    inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":3879    inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":3879    inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":4407    inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":4407    inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":4913    inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":4913    inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":5612    inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":5612    inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":6310    inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":6310    inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":7378    inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":7378    inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":7895    inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":7895    inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":8391    inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":8391    inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":8919    inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":8919    inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":9417    inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":9417    inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":9945    inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":9945    inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":10439   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":10439   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":10967   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":10967   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":11462   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":11462   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":12057   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":12057   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":12555   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":12555   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":13126   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":13126   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":13697   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":13697   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":14396   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":14396   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":15183   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":15183   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":15711   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":15711   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":16287   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":16287   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":16815   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":16815   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":17387   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":17387   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":18086   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":18086   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":18785   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":18785   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":19553   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":19553   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":20317   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":20317   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":20756   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":20756   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":21220   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":21220   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":21869   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":21869   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":22518   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":22518   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":23217   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":23217   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":23916   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":23916   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":24421   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":24421   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":24696   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":24696   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":25890   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":25890   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":26388   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":26388   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":27874   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":27874   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":28376   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":28376   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":29799   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":29799   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":30297   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":30297   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":30797   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":30797   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":31033   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":31033   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":31531   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":31531   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":32456   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":32456   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":32951   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":32951   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":33415   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":33415   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":33909   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":33909   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":34373   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":34373   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":34871   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":34871   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":36273   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":36273   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":37114   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":37114   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":37955   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":37955   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":38430   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":38430   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":39832   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":39832   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":40082   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":40082   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":40411   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":40411   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":40964   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":40964   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":41518   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":41518   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":42077   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":42077   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":42630   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":42630   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":43178   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":43178   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":43735   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":43735   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":44340   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":44340   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":44889   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":44889   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":45348   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":45348   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":45900   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":45900   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":46443   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":46443   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":46846   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":46846   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":47390   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":47390   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":47933   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":47933   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":48387   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt":48387   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\user\\Temp\\be_tmp7656a0e647ecd831\\ip.txt" did not find pos=(40|0) feature=192.168.0.91 context=struct ip L (src) cksum-ok
-----------------------------------------------------------------------------------------------------------------------
test_net80
-----------------------------------------------------------------------------------------------------------------------
test_be.cpp:831
.......................................................................................................................

test_be.cpp:632: FAILED:
  REQUIRE( found )
with expansion:
  false

================ validate  hello_win64_exe (outdir: "C:\\users\\user\\Temp\\be_tmp770f38b8f90421d4") ================
opening "Z:\\home\\user\\bulk_extractor\\src\\tests\\hello_win64_exe"
All data are read; waiting for threads to finish...
Average consumer time spent waiting: 0 sec.
Phase 3. Uniquifying and recombining wordlist
opening "Z:\\home\\user\\bulk_extractor\\src\\tests\\test_json.txt"
opening "Z:\\home\\user\\bulk_extractor\\src\\tests\\test_hello.512b.gz"
=======================================================================================================================
test cases:  42 |  33 passed | 9 failed
assertions: 239 | 230 passed | 9 failed