Trisul version 3 and 4 featured a means of importing a bunch of PCAP files. So should Trisul 5.5. I tried that after a fresh install on Ubuntu 14.o4. But the import ends up at a blank web page (http://trisulserver:3000/sysadmin/list_pcap). No new context can be found on the web GUI. However, the directory /usr/local/var/lib/trisul/pcap_contexts/<context_name> has been created. The Web Server Log is empty. The Main Server Log does't show any messages related to the time import had been initiated. What did I do wrong?

thank you
Jochen

Hi Jochen,


Let me check on this and get back to you in a day.


Thanks,
Vivek

Confirm this is a bug in our 5.5 package. We have a fix now and we will upload packages shortly. Thanks,

Please download the latest builds. This issue has been fixed.

Thanks !!

Got the download - will try during the next couple of days

thank you!

Great, now PCAP import runs better than ever before. I tried to import bunches of PCAPs. All files seem to be processed by trisul, in the end "trisul is stopped" is displayed. Sometimes the progress bar under "reading packets" freezes at a certain percentage. Maybe, the license limits have been exceeded then. At least, I was able to import 5 GB PCAPs in 50 files comprising about 2 hours of real live traffic.

Thanks for your effort!