EFForg / EFForg/rayhunter

rayhunter-check: can not read the PCAP file from QCSuper although no Encapsulation

Open
#730 7 comments 1 reaction 0 assignees View on GitHub
bug parsing
Dominant language
Rust
Stars
5.8k
Forks
490
Avg merge
3d 10h
Merged PRs (30d)
23

Description

Hello Team,

we tried to feed the pcap file the result from QCsuper,
but we got error so. many time although no encapsulation and no need strip header IP (please refer to issue #719 to compare with PCAP file from SCAT that need manual strip header)

[Qcrifky12.pcap.zip](https://github.com/user-attachments/files/24032599/Qcrifky12.pcap.zip)

Details:

**How i run:**

```
./rayhunter-check -p ~/Desktop/Qcrifky12.pcap
```

**Expected :**

NNN messages analyzed, 0 warnings, N messages skipped

**Actual**:

```
INFO [rayhunter_check] **** Beginning analysis of Qcrifky12.pcap

thread 'main' (28603) panicked at check/src/main.rs:98:10:
**failed to read PCAP file: IoError(Kind(UnexpectedEof))**
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
```

[Qcrifky12.pcap.zip](https://github.com/user-attachments/files/24032599/Qcrifky12.pcap.zip)

Looking forward for your kind help, thank you very much in advance.

br,
Rifky

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.