dreadl0ck/ja3

flag provided but not defined: -encodedCommand

aygupt1822 opened this issue · 4 comments

I am getting error, when I am using this ja3 library on windows for live capture analysis
image

You seem to be passing a flag that does not exist: -encodedCommand

even though I can't see it in your screenshot.

Btw, put the interface name in string literals, to avoid side effects of the special characters in there for your shell.

It might be giving error because I am using Windoes Terminal instead of cmd.
Let me try it on cmd and also the interface name in string literals. I will get back to you.

Thanks for your help

You seem to be passing a flag that does not exist: -encodedCommand

even though I can't see it in your screenshot.

Btw, put the interface name in string literals, to avoid side effects of the special characters in there for your shell.

Hey I tried with what you said in your solution, but still it is still not working. now I am running the command in cmd, but now I am getting a new error that "Device not found"

image

I also followed this post : https://haydz.github.io/2020/07/06/Go-Windows-NIC.html and also this post on github : golang/go#35095 (comment) but still I cant figure out the problem

You seem to be passing a flag that does not exist: -encodedCommand

even though I can't see it in your screenshot.

Btw, put the interface name in string literals, to avoid side effects of the special characters in there for your shell.

Hey I managed to solve the problem. I just replaced \Tcpip to \NPF and it worked !!!!

The command was go run main.go -iface "\Device\NPF_{0A72D229-0C2D-4F1D-B1B5-ABAEF0D9274A}"
instead of go run main.go -iface "\Device\Tcpip_{0A72D229-0C2D-4F1D-B1B5-ABAEF0D9274A}"

Thank you for your help !!!!

image