simsong / bulk_extractor

This is the development tree. Production downloads are at:
https://github.com/simsong/bulk_extractor/releases
Other
1.04k stars 184 forks source link

Windows BE doesn't properly read packets #388

Open simsong opened 1 year ago

simsong commented 1 year ago
## image_fname: ram_2pages.bin outdir: "C:\\users\\simsong\\Temp\\be_tmpb757d0eb9a99735f"
## image_fname: test_base16json.txt outdir: "C:\\users\\simsong\\Temp\\be_tmp63deaeb54ecad458"
## output in "C:\\users\\simsong\\Temp\\be_tmpbef5ea176dc24355" for accts
## image_fname: hello_elf outdir: "C:\\users\\simsong\\Temp\\be_tmp323f46a1123e1284"
## image_fname: test_hello.gz outdir: "C:\\users\\simsong\\Temp\\be_tmpb681764d99202b9c"
## image_fname: test_json.txt outdir: "C:\\users\\simsong\\Temp\\be_tmp17a4e3f3e85abc09"
## image_fname: KML_Samples.kml outdir: "C:\\users\\simsong\\Temp\\be_tmp282130321eda2e75"
## image_fname: jpegs.rar outdir: "C:\\users\\simsong\\Temp\\be_tmpdd9848d24e185373"
## image_fname: ntlm1.pcap outdir: "C:\\users\\simsong\\Temp\\be_tmp601da4034bcfa4c5"
"C:\\users\\simsong\\Temp\\be_tmp601da4034bcfa4c5\\ip.txt":# BANNER FILE NOT PROVIDED (-b option)
"C:\\users\\simsong\\Temp\\be_tmp601da4034bcfa4c5\\ip.txt":# BULK_EXTRACTOR-Version: 2.0.1
"C:\\users\\simsong\\Temp\\be_tmp601da4034bcfa4c5\\ip.txt":# Feature-Recorder: ip
"C:\\users\\simsong\\Temp\\be_tmp601da4034bcfa4c5\\ip.txt":# Filename: Z:\home\simsong\bulk_extractor\src\tests\ntlm1.pcap
"C:\\users\\simsong\\Temp\\be_tmp601da4034bcfa4c5\\ip.txt":# Feature-File-Version: 1.1
"C:\\users\\simsong\\Temp\\be_tmp601da4034bcfa4c5\\ip.txt":0    0xd4,0xc3,0xb2,0xa1     TCPDUMP file
"C:\\users\\simsong\\Temp\\be_tmp601da4034bcfa4c5\\ip.txt":40   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmp601da4034bcfa4c5\\ip.txt":40   inet_ntop win32 struct ip R (dst) cksum-ok
**** did not find pos=(40|0) feature=192.168.0.91 context=struct ip L (src) cksum-ok
-----------------------------------------------------------------------------------------------------------------------
test_net1
-----------------------------------------------------------------------------------------------------------------------
../../src/test_be2.cpp:400
.......................................................................................................................

../../src/test_be2.cpp:156: FAILED:
  REQUIRE( false )

## image_fname: ntlm2.pcap outdir: "C:\\users\\simsong\\Temp\\be_tmpbbc838fa08f15062"
"C:\\users\\simsong\\Temp\\be_tmpbbc838fa08f15062\\ip.txt":# BANNER FILE NOT PROVIDED (-b option)
"C:\\users\\simsong\\Temp\\be_tmpbbc838fa08f15062\\ip.txt":# BULK_EXTRACTOR-Version: 2.0.1
"C:\\users\\simsong\\Temp\\be_tmpbbc838fa08f15062\\ip.txt":# Feature-Recorder: ip
"C:\\users\\simsong\\Temp\\be_tmpbbc838fa08f15062\\ip.txt":# Filename: Z:\home\simsong\bulk_extractor\src\tests\ntlm2.pcap
"C:\\users\\simsong\\Temp\\be_tmpbbc838fa08f15062\\ip.txt":# Feature-File-Version: 1.1
"C:\\users\\simsong\\Temp\\be_tmpbbc838fa08f15062\\ip.txt":0    0xd4,0xc3,0xb2,0xa1     TCPDUMP file
"C:\\users\\simsong\\Temp\\be_tmpbbc838fa08f15062\\ip.txt":40   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpbbc838fa08f15062\\ip.txt":40   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpbbc838fa08f15062\\ip.txt":482  inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpbbc838fa08f15062\\ip.txt":482  inet_ntop win32 struct ip R (dst) cksum-ok
**** did not find pos=(40|0) feature=192.168.0.91 context=struct ip L (src) cksum-ok
-----------------------------------------------------------------------------------------------------------------------
test_net2
-----------------------------------------------------------------------------------------------------------------------
../../src/test_be2.cpp:412
.......................................................................................................................

../../src/test_be2.cpp:156: FAILED:
  REQUIRE( false )

## image_fname: ntlm3.pcap outdir: "C:\\users\\simsong\\Temp\\be_tmp6f46a34ae6cae007"
"C:\\users\\simsong\\Temp\\be_tmp6f46a34ae6cae007\\ip.txt":# BANNER FILE NOT PROVIDED (-b option)
"C:\\users\\simsong\\Temp\\be_tmp6f46a34ae6cae007\\ip.txt":# BULK_EXTRACTOR-Version: 2.0.1
"C:\\users\\simsong\\Temp\\be_tmp6f46a34ae6cae007\\ip.txt":# Feature-Recorder: ip
"C:\\users\\simsong\\Temp\\be_tmp6f46a34ae6cae007\\ip.txt":# Filename: Z:\home\simsong\bulk_extractor\src\tests\ntlm3.pcap
"C:\\users\\simsong\\Temp\\be_tmp6f46a34ae6cae007\\ip.txt":# Feature-File-Version: 1.1
"C:\\users\\simsong\\Temp\\be_tmp6f46a34ae6cae007\\ip.txt":0    0xd4,0xc3,0xb2,0xa1     TCPDUMP file
"C:\\users\\simsong\\Temp\\be_tmp6f46a34ae6cae007\\ip.txt":40   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmp6f46a34ae6cae007\\ip.txt":40   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmp6f46a34ae6cae007\\ip.txt":482  inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmp6f46a34ae6cae007\\ip.txt":482  inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmp6f46a34ae6cae007\\ip.txt":1010 inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmp6f46a34ae6cae007\\ip.txt":1010 inet_ntop win32 struct ip R (dst) cksum-ok
**** did not find pos=(40|0) feature=192.168.0.91 context=struct ip L (src) cksum-ok
-----------------------------------------------------------------------------------------------------------------------
test_net3
-----------------------------------------------------------------------------------------------------------------------
../../src/test_be2.cpp:426
.......................................................................................................................

../../src/test_be2.cpp:156: FAILED:
  REQUIRE( false )

## image_fname: ntlm3.pcap outdir: "C:\\users\\simsong\\Temp\\be_tmp55be9b58f8c9a7a5"
"C:\\users\\simsong\\Temp\\be_tmp55be9b58f8c9a7a5\\ip.txt":# BANNER FILE NOT PROVIDED (-b option)
"C:\\users\\simsong\\Temp\\be_tmp55be9b58f8c9a7a5\\ip.txt":# BULK_EXTRACTOR-Version: 2.0.1
"C:\\users\\simsong\\Temp\\be_tmp55be9b58f8c9a7a5\\ip.txt":# Feature-Recorder: ip
"C:\\users\\simsong\\Temp\\be_tmp55be9b58f8c9a7a5\\ip.txt":# Filename: C:\users\simsong\Temp\be_tmp55be9b58f8c9a7a5\offset_file
"C:\\users\\simsong\\Temp\\be_tmp55be9b58f8c9a7a5\\ip.txt":# Feature-File-Version: 1.1
"C:\\users\\simsong\\Temp\\be_tmp55be9b58f8c9a7a5\\ip.txt":44   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmp55be9b58f8c9a7a5\\ip.txt":44   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmp55be9b58f8c9a7a5\\ip.txt":1035 inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmp55be9b58f8c9a7a5\\ip.txt":1035 inet_ntop win32 struct ip R (dst) cksum-ok
**** did not find pos=(30|0) feature=192.168.0.91 context=struct ip L (src) cksum-ok
-----------------------------------------------------------------------------------------------------------------------
test_net3+10
-----------------------------------------------------------------------------------------------------------------------
../../src/test_be2.cpp:441
.......................................................................................................................

../../src/test_be2.cpp:156: FAILED:
  REQUIRE( false )

## image_fname: ntlm3.pcap outdir: "C:\\users\\simsong\\Temp\\be_tmpc1feaa484f00ff7d"
"C:\\users\\simsong\\Temp\\be_tmpc1feaa484f00ff7d\\ip.txt":# BANNER FILE NOT PROVIDED (-b option)
"C:\\users\\simsong\\Temp\\be_tmpc1feaa484f00ff7d\\ip.txt":# BULK_EXTRACTOR-Version: 2.0.1
"C:\\users\\simsong\\Temp\\be_tmpc1feaa484f00ff7d\\ip.txt":# Feature-Recorder: ip
"C:\\users\\simsong\\Temp\\be_tmpc1feaa484f00ff7d\\ip.txt":# Filename: C:\users\simsong\Temp\be_tmpc1feaa484f00ff7d\offset_file
"C:\\users\\simsong\\Temp\\be_tmpc1feaa484f00ff7d\\ip.txt":# Feature-File-Version: 1.1
"C:\\users\\simsong\\Temp\\be_tmpc1feaa484f00ff7d\\ip.txt":30   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpc1feaa484f00ff7d\\ip.txt":30   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpc1feaa484f00ff7d\\ip.txt":1021 inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpc1feaa484f00ff7d\\ip.txt":1021 inet_ntop win32 struct ip R (dst) cksum-ok
**** did not find pos=(16|0) feature=192.168.0.91 context=struct ip L (src) cksum-ok
-----------------------------------------------------------------------------------------------------------------------
test_net3+24
-----------------------------------------------------------------------------------------------------------------------
../../src/test_be2.cpp:458
.......................................................................................................................

../../src/test_be2.cpp:156: FAILED:
  REQUIRE( false )

## image_fname: ntlm80.pcap outdir: "C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4"
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":# BANNER FILE NOT PROVIDED (-b option)
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":# BULK_EXTRACTOR-Version: 2.0.1
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":# Feature-Recorder: ip
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":# Filename: Z:\home\simsong\bulk_extractor\src\tests\ntlm80.pcap
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":# Feature-File-Version: 1.1
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":0    0xd4,0xc3,0xb2,0xa1     TCPDUMP file
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":40   inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":40   inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":482  inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":482  inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":1010 inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":1010 inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":1541 inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":1541 inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":2240 inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":2240 inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":2974 inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":2974 inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":3451 inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":3451 inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":3879 inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":3879 inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":4407 inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":4407 inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":4913 inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":4913 inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":5612 inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":5612 inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":6310 inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":6310 inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":7378 inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":7378 inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":7895 inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":7895 inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":8391 inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":8391 inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":8919 inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":8919 inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":9417 inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":9417 inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":9945 inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":9945 inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":10439        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":10439        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":10967        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":10967        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":11462        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":11462        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":12057        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":12057        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":12555        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":12555        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":13126        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":13126        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":13697        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":13697        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":14396        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":14396        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":15183        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":15183        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":15711        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":15711        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":16287        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":16287        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":16815        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":16815        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":17387        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":17387        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":18086        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":18086        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":18785        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":18785        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":19553        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":19553        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":20317        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":20317        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":20756        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":20756        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":21220        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":21220        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":21869        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":21869        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":22518        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":22518        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":23217        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":23217        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":23916        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":23916        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":24421        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":24421        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":24696        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":24696        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":25890        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":25890        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":26388        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":26388        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":27874        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":27874        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":28376        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":28376        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":29799        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":29799        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":30297        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":30297        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":30797        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":30797        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":31033        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":31033        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":31531        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":31531        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":32456        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":32456        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":32951        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":32951        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":33415        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":33415        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":33909        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":33909        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":34373        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":34373        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":34871        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":34871        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":36273        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":36273        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":37114        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":37114        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":37955        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":37955        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":38430        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":38430        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":39832        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":39832        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":40082        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":40082        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":40411        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":40411        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":40964        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":40964        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":41518        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":41518        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":42077        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":42077        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":42630        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":42630        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":43178        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":43178        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":43735        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":43735        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":44340        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":44340        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":44889        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":44889        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":45348        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":45348        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":45900        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":45900        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":46443        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":46443        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":46846        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":46846        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":47390        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":47390        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":47933        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":47933        inet_ntop win32 struct ip R (dst) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":48387        inet_ntop win32 struct ip L (src) cksum-ok
"C:\\users\\simsong\\Temp\\be_tmpa1bd5117084553f4\\ip.txt":48387        inet_ntop win32 struct ip R (dst) cksum-ok
**** did not find pos=(40|0) feature=192.168.0.91 context=struct ip L (src) cksum-ok
-----------------------------------------------------------------------------------------------------------------------
test_net80
-----------------------------------------------------------------------------------------------------------------------
../../src/test_be2.cpp:472
.......................................................................................................................

../../src/test_be2.cpp:156: FAILED:
  REQUIRE( false )

## image_fname: domexusers-2435863310-2435928846.raw outdir: "C:\\users\\simsong\\Temp\\be_tmp167a49462670b4d5"
## image_fname: hello_win64_exe outdir: "C:\\users\\simsong\\Temp\\be_tmp10642ff0bf07f8fa"
$ bulk_extractor --notify_async -Ro C:\users\simsong\Temp\be_tmp789c7df3056108cb Z:\home\simsong\bulk_extractor\src\tests
## output in "C:\\users\\simsong\\Temp\\be_tmpa1eb2b1fa92a6eca" for email
## output in "C:\\users\\simsong\\Temp\\be_tmp728c77ee288cc298" for email
## output in "C:\\users\\simsong\\Temp\\be_tmp77022e2d234a704b" for pdf
## output in "C:\\users\\simsong\\Temp\\be_tmpe579ae27aec8b9cf" for email
## output in "C:\\users\\simsong\\Temp\\be_tmp70310fffe76ade51" for exif
## output in "C:\\users\\simsong\\Temp\\be_tmp890d92858243284f" for exif
## output in "C:\\users\\simsong\\Temp\\be_tmp88b0fbcda091f0f0" for exif
## output in "C:\\users\\simsong\\Temp\\be_tmpbd4dc907ae1ff8a8" for json
## output in "C:\\users\\simsong\\Temp\\be_tmpdaa201470950b3c4" for vcard_carved
-----------------------------------------------------------------------------------------------------------------------
scan_vcard
-----------------------------------------------------------------------------------------------------------------------
../../src/test_be1.cpp:668
.......................................................................................................................

../../src/test_be1.cpp:677: FAILED:
  REQUIRE( std::filesystem::exists( outdir / "vcard" / "000" / fname ) == true )
with expansion:
  false == true

## output in "C:\\users\\simsong\\Temp\\be_tmpbee9ddf8da6e74a1" for wordlist
## output in "C:\\users\\simsong\\Temp\\be_tmp7e36c488b6e7f1f7" for winprefetch
## output in "C:\\users\\simsong\\Temp\\be_tmpb4dde38247c0c7d4" for zip
-----------------------------------------------------------------------------------------------------------------------
scan_zip
-----------------------------------------------------------------------------------------------------------------------
../../src/test_be1.cpp:699
.......................................................................................................................

../../src/test_be1.cpp:704: FAILED:
  REQUIRE( std::filesystem::exists( outdir / "zip/000/testfilex.docx____-0-ZIP-0__Content_Types_.xml") == true )
with expansion:
  false == true

=======================================================================================================================
test cases:     53 |     44 passed | 9 failed