rocknsm / rock

Automated deployment scripts for the RockNSM network hunting distribution.

Home Page:http://rocknsm.io

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

FSF fails to scan files due to missing dependency

kwbyron opened this issue · comments

commented

Installed FSF package from rocknsm_2_4 repo.
Service starts and opens listener correctly.

Attempting to manually scan a file with the command:
sudo /opt/fsf/fsf-client/fsf_client.py --full ~/extracted-files/FILENAME.exe

Returns the errors:
There was a problem sending file FILENAME.exe to localhost on port 5800. Error: <class 'socket.error'>
There was a problem getting data for FILENAME.exe from localhost on port 5800. Error: <class 'struct.error'>

Checking the daemon.log shows the error:
File "/usr/lib/python2.7/site-packages/oletools/olevba.py", line 293, in <module> from pyparsing import \ ImportError: No module named pyparsing

Installed pyparsing with the command:
sudo pip install pyparsing

Manually scanning files after installing pyparsing is successful.

FSF INFO:
Name : fsf
Arch : x86_64
Version : 1.1
Release : 5.git.7c5b201.el7.centos
Size : 207 k
Repo : installed
From repo : rocknsm_2_4

python2-oletools INFO:
Name : python2-oletools
Arch : noarch
Epoch : 1
Version : 0.53.1
Release : 2.el7
Size : 1.6 M
Repo : installed
From repo : rocknsm_2_4