Page 1 of 1
EVE ng PRO and wireshark save issue
Posted: Fri Feb 07, 2020 4:45 am
by verma-rohit
Hi,
I am unable to save any captured in wireshark. When i try to save i get to a file location called thinclient_drives but a save would result in error as "Bad file descriptor" ?
Re: EVE ng PRO and wireshark save issue
Posted: Fri Feb 07, 2020 9:48 pm
by Uldis (UD)
Please read carefull EVE Cookbook section 12.1.
Step 2 and step 3
It is specific path where to save files sir
https://www.eve-ng.net/index.php/docume ... -cookbook/
Re: EVE ng PRO and wireshark save issue
Posted: Mon Feb 10, 2020 2:47 pm
by verma-rohit
Hi Uldis,
yes I have gone through the section in cook book and apprently the save location is :
/nobody/thinclient_drives/GUACFS/Download
but when i try to save I cannot see any folder in thinclient_drives. I have attached the screen shot for better clarity.
Re: EVE ng PRO and wireshark save issue
Posted: Mon Feb 10, 2020 5:41 pm
by Uldis (UD)
on same lab open another capture, and try save. If not ok
It looks like some docker glitch try reboot eve
and try this operation again
If you have this issue again, report me
Re: EVE ng PRO and wireshark save issue
Posted: Tue Feb 11, 2020 4:56 pm
by verma-rohit
Hi Uldis,
I am not using Wireshark docker though. Right-click on node and capture interface and capture. I moved from firefox to chrome and the issue seems to have sorted out. I will test it again tomorrow and report the outcome. Thanks for your help.
Re: EVE ng PRO and wireshark save issue
Posted: Tue Feb 11, 2020 9:54 pm
by Uldis (UD)
EVE PRO is using automatically embeded docker Wireshark