1ultimat3 / pcapviz Goto Github PK

I install PcapViz on my ubuntu 14.04
When I run the tset script python main.py -i smallFlows.pcap -o small_tcp.png --layer3
it returns
Traceback (most recent call last):
File "main.py", line 3, in <module>
from pcapviz.core import GraphManager
File "/home/lin/PcapViz/pcapviz/__init__.py", line 1, in <module>
from scapy.all import *
File "/usr/local/lib/python2.7/dist-packages/scapy/all.py", line 10, in <module>
from .config import *
File "/usr/local/lib/python2.7/dist-packages/scapy/config.py", line 11, in <module>
from .data import *
File "/usr/local/lib/python2.7/dist-packages/scapy/data.py", line 184, in <module>
TCP_SERVICES,UDP_SERVICES=load_services("/etc/services")
File "/usr/local/lib/python2.7/dist-packages/scapy/data.py", line 109, in load_services
f=open(filename, errors='ignore')
TypeError: 'errors' is an invalid keyword argument for this function
How can i solve this? Thanks

Hello,

This is not an "issue" more of a request and question. But I was wondering if the tool supported DNS resolution for IPs or if the tool can provide the FQDN of the IP address? If not, what modifications would I need to do to make it do so? Or would you mind making the modification to enable this feature? Either way it would be greatly appreciated!

Provider has moved to GeoLite2. Would it be possible to update? I'd like to check out your tool ;)

Traceback (most recent call last):
File "main.py", line 3, in
from pcapviz.core import GraphManager
File "/home/lau/PcapViz/pcapviz/core.py", line 8, in
from pygeoip import GeoIP
ImportError: No module named pygeoip

is there any chance that someone can take my pcap file and produce a layer2 and layer3 topology png in the meantime. I really need it at the moment.

When I try to install the requirements using the requirements.txt file I get the following errors:

Failed building wheel for pygraphpviz

FYI:

Traceback (most recent call last):
  File "main.py", line 67, in <module>
    sg.draw(filename = ofn)
  File "/media/cuckoo/opt/PcapViz/pcapviz/core.py", line 198, in draw
    graph.draw(filename)
  File "/usr/local/lib/python2.7/dist-packages/pygraphviz/agraph.py", line 1518, in draw
    fh = self._get_fh(path, 'w+b')
  File "/usr/local/lib/python2.7/dist-packages/pygraphviz/agraph.py", line 1547, in _get_fh
    fh = open(path, mode=mode)
IOError: [Errno 2] No such file or directory: 'Raw_223_/home/me/bad/work/pcaps/layer4.png'

layer 2 and 3 had no issues outputing to ~/bad/work/pcaps/layer3.png

Hello,

great tool you have written.
Can you tell me how to solve the following issue?
RuntimeWarning: neato: graph is too large for cairo-renderer bitmaps. Scaling by 0.198021 to fit
warnings.warn(b"".join(errors).decode(self.encoding), RuntimeWarning)

Thanks in advance

John

Hi,

I'm trying to use this python script (on Windows).

Commande line :

python .\main.py -i "input.pcap" -o "output.png" --layer2

Error:

Traceback (most recent call last):
File ".\main.py", line 35, in
g = GraphManager(packets, layer=layer)
File "P:\Python\PcapViz\pcapviz\core.py", line 42, in init
self.graph.add_edge(src, dst, {'packets': [packet]})
TypeError: add_edge() takes 3 positional arguments but 4 were given

When I am trying to install it, using the graphviz I can this issue:

great tool.thank you so much for develop this.
i got error

$ python main.py -i smallFlows.pcap -o small_tcp_l2.png --layer3
WARNING: No route found for IPv6 destination :: (no default route?)
WARNING:root:could not load GeoIP data
Traceback (most recent call last):
File "main.py", line 38, in
g.draw(filename=args.out)
File "/home/twster/PcapViz/pcapviz/core.py", line 116, in draw
graph = self.get_graphviz_format()
File "/home/twster/PcapViz/pcapviz/core.py", line 144, in get_graphviz_format
agraph = networkx.to_agraph(self.graph)
AttributeError: 'module' object has no attribute 'to_agraph'
twster@hckndev:~/PcapViz$

How can I visualize the graph (dot file) obtained from .pcap files in Gephi ?

The lib 'networkx' has been updated to ver 2.0 in Sep, 2017(https://pypi.python.org/pypi/networkx/), which the version to download use 'pip install'. And the parameters of some functions have changed. For example the parameters of add_edges() in DiGraph have changed to 'def add_edge(self, u, v, **attr)' from 'def add_edge(self, u, v, attr_dict=None, **attr)'. So when I compile the source code, some errors occur like 'TypeError: add_edge() takes exactly 3 arguments (4 given)'.