Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

使用-l参数时出现WRN failed to create multiLogger error="open : no such file or directory" #564

Closed
Ember2024 opened this issue Jun 8, 2024 · 1 comment · Fixed by #566
Labels
bug Something isn't working help wanted Extra attention is needed

Comments

@Ember2024
Copy link

Ember2024 commented Jun 8, 2024

Describe the bug
使用-l参数未正常输出捕获的数据包到文件内

2024-06-08T02:08:57Z WRN failed to create multiLogger error="open : no such file or directory"
2024-06-08T02:08:57Z INF AppName="eCapture(旁观者)"
2024-06-08T02:08:57Z INF HomePage=https://ecapture.cc
2024-06-08T02:08:57Z INF Repository=https://github.com/gojue/ecapture
2024-06-08T02:08:57Z INF Author="CFC4N <cfc4ncs@gmail.com>"
2024-06-08T02:08:57Z INF Description="Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64."
2024-06-08T02:08:57Z INF Version=androidgki_arm64:v0.8.3:6.5.0-1021-azure
2024-06-08T02:08:57Z WRN ========== module starting. ==========
2024-06-08T02:08:57Z INF Kernel Info=5.10.168 Pid=8018
2024-06-08T02:08:57Z WRN Your environment is like a container. We won't be able to detect the BTF configuration.
If eCapture fails to run, try specifying the BTF mode. use `-b 2` to specify non-CORE mode.
2024-06-08T02:08:57Z INF listen=localhost:28256
2024-06-08T02:08:57Z INF https server starting...You can update the configuration file via the HTTP interface.
2024-06-08T02:08:57Z INF BTF bytecode mode: non-CORE. btfMode=0
2024-06-08T02:08:57Z INF master key keylogger has been set. eBPFProgramType=Text keylogger=
2024-06-08T02:08:57Z INF module initialization. isReload=false moduleName=EBPFProbeOPENSSL
2024-06-08T02:08:57Z INF Module.Run()
2024-06-08T02:08:57Z INF OpenSSL/BoringSSL version found BoringSSL Version=13
2024-06-08T02:08:57Z INF Hook masterKey function ElfType=2 Functions=["SSL_in_init"] binrayPath=/apex/com.android.conscrypt/lib64/libssl.so
2024-06-08T02:08:57Z INF target all process.
2024-06-08T02:08:57Z INF target all users.
2024-06-08T02:08:57Z INF setupManagers eBPFProgramType=Text
2024-06-08T02:08:57Z INF BPF bytecode file is matched. bpfFileName=user/bytecode/boringssl_a_13_kern_noncore.o
2024-06-08T02:08:58Z INF perfEventReader created mapSize(MB)=4
2024-06-08T02:08:58Z INF perfEventReader created mapSize(MB)=4
2024-06-08T02:08:58Z INF module started successfully. isReload=false moduleName=EBPFProbeOPENSSL

To Reproduce

Android在temux内
:/data/data/com.termux/files/home # ./ecapture tls -l save.log

Expected behavior
将数据包正常输出到文件内

Screenshots

Screenshot_2024-06-08-10-14-06-910_com termux

Linux Server/Android (please complete the following information):
eCapture version: androidgki_arm64:v0.8.3:6.5.0-1021-azure
Linux localhost 5.10.168-android12-9-gda86322a9a27 #1 SMP PREEMPT Tue Nov 14 06:03:26 UTC 2023 aarch64 Toybox
Android 13 Miui14.0.5

@cfc4n cfc4n added help wanted Extra attention is needed bug Something isn't working labels Jun 8, 2024
@cfc4n cfc4n linked a pull request Jun 9, 2024 that will close this issue
@cfc4n
Copy link
Member

cfc4n commented Jun 9, 2024

fixed by #566 ,please retry.

@cfc4n cfc4n closed this as completed in #566 Jun 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working help wanted Extra attention is needed
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants