{"action":"created","issue":{"url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/1200","repository_url":"https://api.github.com/repos/cuckoosandbox/cuckoo","labels_url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/1200/labels{/name}","comments_url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/1200/comments","events_url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/1200/events","html_url":"https://github.com/cuckoosandbox/cuckoo/issues/1200","id":193293376,"number":1200,"title":"Cuckoo New Installation Issues","user":{"login":"rashishsharma","id":14071715,"avatar_url":"https://avatars.githubusercontent.com/u/14071715?v=3","gravatar_id":"","url":"https://api.github.com/users/rashishsharma","html_url":"https://github.com/rashishsharma","followers_url":"https://api.github.com/users/rashishsharma/followers","following_url":"https://api.github.com/users/rashishsharma/following{/other_user}","gists_url":"https://api.github.com/users/rashishsharma/gists{/gist_id}","starred_url":"https://api.github.com/users/rashishsharma/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rashishsharma/subscriptions","organizations_url":"https://api.github.com/users/rashishsharma/orgs","repos_url":"https://api.github.com/users/rashishsharma/repos","events_url":"https://api.github.com/users/rashishsharma/events{/privacy}","received_events_url":"https://api.github.com/users/rashishsharma/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":9,"created_at":"2016-12-03T15:25:20Z","updated_at":"2016-12-15T03:35:38Z","closed_at":null,"body":"Hi All,\r\n\r\nI am new to Cuckoo Sandbox. I have installed Cuckoo with one physical machine as a guest (running on ubuntu). I am getting few errors while using it not sure how to fix them. Below are the details:\r\n\r\n2016-12-03 15:16:31,327 [lib.cuckoo.core.scheduler] INFO: Task #13: acquired machine physical1 (label=physical1)\r\n2016-12-03 15:16:31,337 [modules.auxiliary.sniffer] INFO: Started sniffer with PID 2298 (interface=eth0, host=172.16.0.125, pcap=/cuckoo/storage/analyses/13/dump.pcap)\r\n2016-12-03 15:17:32,697 [lib.cuckoo.core.scheduler] **ERROR: Machinery error: Timeout hit while for machine physical1 to change status**\r\n2016-12-03 15:17:32,702 [lib.cuckoo.core.scheduler] **CRITICAL: A critical error has occurred trying to use the machine with name physical1 during an analysis due to which it is no longer in a working state, please report this issue and all of the related environment details to the developers so we can improve this situation. (Note that before we would simply remove this VM from doing any more analyses, but as all the VMs will eventually be depleted that way, hopefully we'll find a better solution now).**\r\n2016-12-03 15:17:32,703 [lib.cuckoo.core.plugins] **WARNING: Unable to stop auxiliary module: Potential error while running tcpdump, did not expect the following standard error output: 'dropped privs to root'.**\r\n2016-12-03 15:17:32,743 [modules.processing.behavior] **WARNING: Analysis results folder does not exist at path '/cuckoo/storage/analyses/13/logs'.**\r\n\r\nHelp on this will be highly appreciated.\r\n\r\nThanks,\r\nRashish "},"comment":{"url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/comments/267230045","html_url":"https://github.com/cuckoosandbox/cuckoo/issues/1200#issuecomment-267230045","issue_url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/1200","id":267230045,"user":{"login":"IMhappyZzz","id":24290800,"avatar_url":"https://avatars.githubusercontent.com/u/24290800?v=3","gravatar_id":"","url":"https://api.github.com/users/IMhappyZzz","html_url":"https://github.com/IMhappyZzz","followers_url":"https://api.github.com/users/IMhappyZzz/followers","following_url":"https://api.github.com/users/IMhappyZzz/following{/other_user}","gists_url":"https://api.github.com/users/IMhappyZzz/gists{/gist_id}","starred_url":"https://api.github.com/users/IMhappyZzz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/IMhappyZzz/subscriptions","organizations_url":"https://api.github.com/users/IMhappyZzz/orgs","repos_url":"https://api.github.com/users/IMhappyZzz/repos","events_url":"https://api.github.com/users/IMhappyZzz/events{/privacy}","received_events_url":"https://api.github.com/users/IMhappyZzz/received_events","type":"User","site_admin":false},"created_at":"2016-12-15T03:35:38Z","updated_at":"2016-12-15T03:35:38Z","body":"I ran a test for coreftplite.exe,and I have no report.html.This is my log file：\r\n\r\n2016-12-14 19:26:00,183 [lib.cuckoo.core.scheduler] INFO: File already exists at \"/usr/local/src/cuckoo/storage/binaries/364493d168a719143526cdbfd8f43051e7dd0614fddb1dcb2db0d9d7d5ba0361\"\r\n2016-12-14 19:26:00,199 [lib.cuckoo.core.scheduler] INFO: Task #8: acquired machine cuckoo1 (label=guest)\r\n2016-12-14 19:26:00,204 [modules.auxiliary.sniffer] INFO: Started sniffer with PID 4403 (interface=VMnet0, host=10.0.2.15, pcap=/usr/local/src/cuckoo/storage/analyses/8/dump.pcap)\r\n2016-12-14 19:26:02,054 [lib.cuckoo.core.guest] INFO: Starting analysis on guest (id=cuckoo1, ip=10.0.2.15)\r\n2016-12-14 19:29:02,664 [lib.cuckoo.core.scheduler] ERROR: Error from the Cuckoo Guest: cuckoo1: the guest initialization hit the critical timeout, analysis aborted.\r\n2016-12-14 19:29:02,670 [lib.cuckoo.core.plugins] WARNING: Unable to stop auxiliary module: Error running tcpdump to sniff the network traffic during the analysis; stdout = '' and stderr = \"tcpdump: VMnet0: You don't have permission to capture on that device\\n(socket: Operation not permitted)\\n\". Did you enable the extra capabilities to allow running tcpdump as non-root user and disable AppArmor properly (only applies to Ubuntu)?\r\n2016-12-14 19:29:03,878 [modules.processing.behavior] WARNING: Analysis results folder does not exist at path '/usr/local/src/cuckoo/storage/analyses/8/logs'.\r\n2016-12-14 19:29:03,880 [modules.processing.procmemory] WARNING: In order to extract PE files from memory dumps it is required to have pefile installed (`pip install pefile`).\r\n2016-12-14 19:29:04,328 [modules.processing.network] WARNING: The PCAP file does not exist at path \"/usr/local/src/cuckoo/storage/analyses/8/dump.pcap\".\r\n2016-12-14 19:29:05,803 [lib.cuckoo.core.scheduler] INFO: Task #8: reports generation completed (path=/usr/local/src/cuckoo/storage/analyses/8)\r\n2016-12-14 19:29:05,821 [lib.cuckoo.core.scheduler] INFO: Task #8: analysis procedure completed"}}
{"actor":{"display_login":"IMhappyZzz"}}