Thanks!!

On 5/23/08, Christian Seifert <[EMAIL PROTECTED]> wrote:
>
> Amit, seems like everything is working as designed. Capture currently does
> not close once it has visited URLs.
> If you add more URLs to your uris.txt, you should see it continue to visit
> sites.
>
> Christian
>
>  On Fri, May 23, 2008 at 7:22 AM, Amit Sinha <[EMAIL PROTECTED]> wrote:
>
>>  Hi List,
>>
>> Using VMWare Server 1.0.5
>> HPC ver 2.1.0-300
>>
>> I am able to establish a connection between the client and the server. The
>> sequece of operation:
>>
>> Execute the command on the server to connect to the client (and I changed
>> the port to 7070 after reading through the troubleshooting section)
>> c:\xyz> java -Djava.net.preferIPv4Stack=true -jar CaptureServer.jar -s
>> x.x.x.x:7070 -f uris.txt
>>
>> On the Client:
>> I see the first (initial) successful "reverting VM" operation complete
>>
>> I see a command window
>> executing  C:\WINDOWS\system32>c:\progra~1\capture\CaptureClient.exe
>> -s y.y.y.y -p 7070 -a 1259414 -b 8451275  1>c:\progra~1\capture\capture.log
>>
>> I also see IE opening and displaying the website as listed in uris.txt
>> (visiting www.google.com only for this test )
>>
>> In the configuration I have packet capture turned on and I receive the zip
>> file on the server with the packet capture in it.
>>
>> The server displays getting back PONG messages.
>>
>> The browser in the VM closes BUT the CaptureClient.exe dos window is still
>> running
>>
>> Eventually on the server:
>>
>> [May 23, 2008 9:52:59 AM-x.x.x.x:902-8451275] Got pong
>> [May 23, 2008 9:53:05 AM-x.x.x.x:902-8451275] VM stalled during operation,
>> reverting VM
>> [May 23, 2008 9:53:05 AM-x.x.x.x:902-8451275] ClientSetState: DISCONNECTED
>> [May 23, 2008 9:53:05 AM-x.x.x.x:902-8451275] socket closed
>>
>> stats.log:
>>
>> "May 23, 2008 9:52:43
>> AM","1","1","1","0","0","1","0","0","18.0","10.0","0.0","261"
>> "May 23, 2008 9:57:43
>> AM","1","1","1","0","0","1","0","1","18.0","10.0","0.0","136"
>>
>> (I've tried it a couple times)
>>
>> At this point if I kill the operation on the server and start it all over
>> again (without touching the client VM which still has the CaptureClient.exe
>> running) the server is again able to do the "initial" VM reverting to
>> snapshot before starting the client side execution sequence.
>>
>> Any Ideas of what to do next to get the entire operation to complete
>> automatically.
>>
>> Thanks
>>
>
_______________________________________________
Capture-HPC mailing list
Capture-HPC@public.honeynet.org
https://public.honeynet.org/mailman/listinfo/capture-hpc

Reply via email to