how logs are transmitted from guest to host

Question

how logs are transmitted from guest to host

william-vu opened this issue 7 years ago · comments

Hi all,
As I understand, when running cuckoo monitor in guest machine, it logs API calls and sends the logs to host. Could you please help me answer these 2 questions: (i) how the log is stored? and (ii) which mechanism is used to send logs from guest to host, named pipe or RPC?
Thank you

doomedraven · Answer 1 · Wed Aug 02 2017 15:29:58 GMT+0800 (China Standard Time)

live bson logging, and stored in bson

william-vu · Answer 2 · Wed Aug 02 2017 15:33:44 GMT+0800 (China Standard Time)

do you know how bson log is sent to host? thanks.

doomedraven · Answer 3 · Wed Aug 02 2017 15:34:17 GMT+0800 (China Standard Time)

read this https://github.com/spender-sandbox/cuckoo-modified/blob/55bafa2a325379418da9c2cdc66530458d827d17/lib/cuckoo/common/netlog.py

william-vu · Answer 4 · Mon Aug 07 2017 12:41:14 GMT+0800 (China Standard Time)

Thanks. Now I understand how logs are transmitted from analysis machine to host.
Can I ask another question? Why the Cuckoo monitor use bson to log instead of json? Is there any advantages of using bson?

doomedraven · Answer 5 · Mon Aug 07 2017 12:52:04 GMT+0800 (China Standard Time)

Google it, google has goos adnswers for that questions :)