Skip to content
This repository has been archived by the owner on Apr 1, 2024. It is now read-only.

fail to ingest pcap: ensureSpawnedProcessTermination failed: Access is denied. #16

Closed
alfred-landrum opened this issue Apr 17, 2020 · 3 comments
Assignees
Labels
bug Something isn't working wontfix This will not be worked on

Comments

@alfred-landrum
Copy link

alfred-landrum commented Apr 17, 2020

From a user report in our public Slack forum: When they tried to ingest a pcap, they saw this error message ensureSpawnedProcessTermination failed: Access is denied. That's from our zeek-launcher that was added in #9 . We've asked for a systeminfo dump to see their Windows version.

@alfred-landrum alfred-landrum added the bug Something isn't working label Apr 17, 2020
@alfred-landrum
Copy link
Author

The user reported they hit this on Windows 7 (6.1.7601 Service Pack 1 Build 7601). We're not testing on Windows 7, but our Electron & Go versions do support it.

@alfred-landrum alfred-landrum added the wontfix This will not be worked on label Apr 21, 2020
@alfred-landrum
Copy link
Author

I'm closing this for now, as the user reported that an upgrade to Brim v0.8.0 resolved the issue. However, we don't think we made any relevant changes to the related code.

We also don't have a version of Windows 7 available that we can try this ourselves - it's out of support from Microsoft. We'll re-open if we get other reports.

@philrz
Copy link

philrz commented Apr 23, 2020

While we don't know with certainty precisely what addressed the issue, the user did circle back with an additional comment we can keep in mind should this symptom surface again:

I Just restart my computer.Likely I run brim in administrator privileges.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
bug Something isn't working wontfix This will not be worked on
Projects
None yet
Development

No branches or pull requests

2 participants