Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug] Yeti Analyzer docker images pip installing pyeti #708

Closed
asucrews opened this issue Mar 4, 2020 · 3 comments · Fixed by #740
Closed

[Bug] Yeti Analyzer docker images pip installing pyeti #708

asucrews opened this issue Mar 4, 2020 · 3 comments · Fixed by #740
Labels
category:bug Issue is related to a bug

Comments

@asucrews
Copy link

asucrews commented Mar 4, 2020

Describe the bug

Looks like docker image pip installing pyeti

2020-03-04 22:11:37,776 [INFO] from org.thp.cortex.services.AuditActor in application-akka.actor.default-dispatcher-87 - Job AXCnmqjWXsbgdWPRkHNu has be updated (JsDefined("InProgress"))
2020-03-04 22:11:37,776 [INFO] from org.thp.cortex.services.ProcessJobRunnerSrv in application-akka.actor.default-dispatcher-83 - Execute /opt/Cortex-Analyzers/analyzers/Yeti/yeti.py in /opt/Cortex-Analyzers/analyzers, timeout is 30 minutes
2020-03-04 22:11:37,859 [INFO] from org.thp.cortex.services.ProcessJobRunnerSrv in Thread-38 - Job AXCnmqjWXsbgdWPRkHNu: Traceback (most recent call last):
2020-03-04 22:11:37,859 [INFO] from org.thp.cortex.services.ProcessJobRunnerSrv in Thread-38 - Job AXCnmqjWXsbgdWPRkHNu: File "/opt/Cortex-Analyzers/analyzers/Yeti/yeti.py", line 3, in
2020-03-04 22:11:37,859 [INFO] from org.thp.cortex.services.ProcessJobRunnerSrv in Thread-38 - Job AXCnmqjWXsbgdWPRkHNu: import pyeti
2020-03-04 22:11:37,859 [INFO] from org.thp.cortex.services.ProcessJobRunnerSrv in Thread-38 - Job AXCnmqjWXsbgdWPRkHNu: ModuleNotFoundError: No module named 'pyeti'
2020-03-04 22:11:38,785 [INFO] from org.thp.cortex.services.JobSrv in application-akka.actor.default-dispatcher-87 - Job AXCnmqjWXsbgdWPRkHNu has finished with status Failure
2020-03-04 22:11:38,785 [INFO] from org.thp.cortex.services.AuditActor in application-akka.actor.default-dispatcher-87 - Job AXCnmqjWXsbgdWPRkHNu has be updated (JsDefined("Failure"))

To Reproduce
Steps to reproduce the behavior:

  1. emable yeti analyzer
  2. create new analysis

Expected behavior
A clear and concise description of what you expected to happen.

Return hit from yeti

Complementary information
If applicable, add screenshots and any additional information that might help explain your problem.

2020-03-04 22:11:37,776 [INFO] from org.thp.cortex.services.AuditActor in application-akka.actor.default-dispatcher-87 - Job AXCnmqjWXsbgdWPRkHNu has be updated (JsDefined("InProgress"))
2020-03-04 22:11:37,776 [INFO] from org.thp.cortex.services.ProcessJobRunnerSrv in application-akka.actor.default-dispatcher-83 - Execute /opt/Cortex-Analyzers/analyzers/Yeti/yeti.py in /opt/Cortex-Analyzers/analyzers, timeout is 30 minutes
2020-03-04 22:11:37,859 [INFO] from org.thp.cortex.services.ProcessJobRunnerSrv in Thread-38 - Job AXCnmqjWXsbgdWPRkHNu: Traceback (most recent call last):
2020-03-04 22:11:37,859 [INFO] from org.thp.cortex.services.ProcessJobRunnerSrv in Thread-38 - Job AXCnmqjWXsbgdWPRkHNu: File "/opt/Cortex-Analyzers/analyzers/Yeti/yeti.py", line 3, in
2020-03-04 22:11:37,859 [INFO] from org.thp.cortex.services.ProcessJobRunnerSrv in Thread-38 - Job AXCnmqjWXsbgdWPRkHNu: import pyeti
2020-03-04 22:11:37,859 [INFO] from org.thp.cortex.services.ProcessJobRunnerSrv in Thread-38 - Job AXCnmqjWXsbgdWPRkHNu: ModuleNotFoundError: No module named 'pyeti'
2020-03-04 22:11:38,785 [INFO] from org.thp.cortex.services.JobSrv in application-akka.actor.default-dispatcher-87 - Job AXCnmqjWXsbgdWPRkHNu has finished with status Failure
2020-03-04 22:11:38,785 [INFO] from org.thp.cortex.services.AuditActor in application-akka.actor.default-dispatcher-87 - Job AXCnmqjWXsbgdWPRkHNu has be updated (JsDefined("Failure"))

Work environment

  • Client OS: windows
  • Server OS: ubuntu 18.04
  • Browse type and version: chrome
  • Cortex version: Version 80.0.3987.122 (Official Build) (64-bit)
  • Cortex Analyzer/Responder name: yeti
  • Cortex Analyzer/Responder version: latest

Possible solutions
If applicable, indicate possible solutions to the problem.

add pip install pyeti within docker.

Additional context
Add any other context about the problem here.

@asucrews asucrews added the category:bug Issue is related to a bug label Mar 4, 2020
@dadokkio
Copy link
Contributor

dadokkio commented Apr 7, 2020

@asucrews probably the error was that the docker was installing pyeti library for python2 while the analyzer was running python3.
Can you please check if the proposed fix resolve it?

@asucrews
Copy link
Author

asucrews commented Apr 9, 2020

Yes this work! thanks!

@garanews
Copy link
Contributor

fixed in 2.7.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
category:bug Issue is related to a bug
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants