vichargrave / espcap Goto Github PK

        es = None
        if node is not None:
            es = Elasticsearch(node)

            print("Testing elasticsearch connection")
            if es.ping():
                print("Ping success")
            else:
                print("Unable to ping elasticsearch instance on {}\nPlease check and try again".format(node))
                sys.exit(1)

root@debian:~/espcap# python3.7 src/espcap.py --file=test_pcaps/test_http.pcap --node=localhost:9200
Loading packet capture file(s)
test_pcaps/test_http.pcap
Running as user "root" and group "root". This could be dangerous.
[ERROR]  'timestamp'
[ERROR]  [priority,] message string
Traceback (most recent call last):
  File "src/espcap.py", line 77, in init_file_capture
    helpers.bulk(client=es, actions=index_packets(capture=capture), chunk_size=chunk, raise_on_error=True)
  File "/usr/local/lib/python3.7/site-packages/elasticsearch/helpers/actions.py", line 300, in bulk
    for ok, item in streaming_bulk(client, actions, *args, **kwargs):
  File "/usr/local/lib/python3.7/site-packages/elasticsearch/helpers/actions.py", line 212, in streaming_bulk
    actions, chunk_size, max_chunk_bytes, client.transport.serializer
  File "/usr/local/lib/python3.7/site-packages/elasticsearch/helpers/actions.py", line 63, in _chunk_actions
    for action, data in actions:
  File "/root/espcap/src/indexer.py", line 30, in index_packets
    timestamp = int(packet['timestamp'])/1000
KeyError: 'timestamp'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "src/espcap.py", line 124, in main
    init_file_capture(es=es, tshark=tshark, pcap_files=pcap_files, chunk=chunk)
  File "src/espcap.py", line 81, in init_file_capture
    syslog.syslog(syslog.LOG_ERR, e)
TypeError: [priority,] message string

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "src/espcap.py", line 141, in <module>
    main()
  File "/usr/local/lib/python3.7/site-packages/click/core.py", line 764, in __call__
    return self.main(*args, **kwargs)
  File "/usr/local/lib/python3.7/site-packages/click/core.py", line 717, in main
    rv = self.invoke(ctx)
  File "/usr/local/lib/python3.7/site-packages/click/core.py", line 956, in invoke
    return ctx.invoke(self.callback, **ctx.params)
  File "/usr/local/lib/python3.7/site-packages/click/core.py", line 555, in invoke
    return callback(*args, **kwargs)
  File "src/espcap.py", line 136, in main
    syslog.syslog(syslog.LOG_ERR, e)
TypeError: [priority,] message string
tshark: An error occurred while printing packets: Broken pipe.