TELNET dont work with eve-ng

apostolos192 wrote:

…

Apple is not supporting either..

Any support will be appreciated

If the problems persist with the app and macOS versions updated to current, contact the app vendor.

https://www.eve-ng.net/ indicates 5.0.1-106 is current.

The app vendor discussion forum is here: https://www.eve-ng.net/forum/

A previous report in this thread indicated a hypervisor they were using needed an update, IIRC.

Again, if y’all are looking to get into devops and into app or system or network security as can be inferred from the use of this app, the app release notes, the errata, the installed versions, and particularly the app-specific relevant forums are where all the “fun” (useful) info is often hidden, too. The sort of stuff that either helps, or trips up a project or a deployment.

Put differently, maybe consider this installation issue a devops test, and treat the research and questions accordingly. The EVE-NG download page has what they call a “Apple OSX client side pack” (misspelling included) for loading tools onto macOS, too.

Unrelated folks (us) and unrelated vendors (Apple) tend to be a near-last-resort path for app assistance at best, short of migrating off that particular app or service.

Issue the following (harmless) telnet command (assumes common telnet syntax) to test the telnet client:

telnet apple.com 80

That should show some HTML web chatter from the Apple web server, and exit.

If that telnet command working, your issues lie elsewhere.

MOMOSKI,

I was able to fix it upgrading the VM. It was using hardware version 11 and now that it's been upgraded to version 20 telnet is working as it should. Hope this helps.

That HTTP and HTML output indicates that the telnet client and IP networking from your client to Apple and back again is working just fine. That output is exactly what is expected when a web browser (telnet, in this case) connects to a web server.

The connection to 10.211.55.2:32778 is also working, and whatever that device is—in my very limited French—recommending the use of ssh. Which would be expected in any environment expecting security.

Your error here lurks elsewhere.

Probably something related to the EVE environment or its configuration or its operations, as a guess.

I’d suggest re-reading EVE documentation, updating to EVE 5.0.1-79 from the last few days, then checking in an EVE-related forum for assistance. (EVE targets networking, devops, and security, and telnet and ssh are right in the middle of all of that, too.)

If the EVE doc is insufficient, ask again here: https://www.eve-ng.net/forum/

Davila wrote:

I have the same problem. Were you able to fix it?

Test telnet with port 80 on some web server, tapping return a few times upon entering the command, as was suggested in my reply above. If that works, then telnet works.

If telnet works, update to current EVE and test again, and then contact the maintainers of eve-ng if the issue persists.

This all based on what was reported here.

Davila wrote:

I have the same problem. Were you able to fix it?

I’d suggest re-reading EVE documentation, updating to release 5.0.1-142 from the last few days, then checking in an EVE-related forum for assistance. (EVE targets networking, devops, and security, and telnet and ssh are right in the middle of all of that, too.)

If the EVE doc is insufficient, ask again here: https://www.eve-ng.net/forum/

YOGI2610 wrote:

I am also having the same issue, Is it working for anyone who installed EVE on UTM ?

I’d suggest updating to release 6.2.0-4 if not already running that, reviewing the installation and configuration documentation, and then posting in an EVE-related forum for assistance.

EVE targets networking, devops, and security, which means telnet and ssh troubleshooting are right in the middle of all of that, too.

If current versions and the EVE docs are insufficient to get this telnet connection working, ask again over in the EVE discussion forums: https://www.eve-ng.net/forum/

MOMOSKI wrote:

I have the same issue with apple sillicon

Here is the fix from this same current thread: Update the apps and macOS to current versions.

If the problems persist with the app and macOS versions updated to current, contact the app vendor.

_morfeoxx24 wrote:

I'm facing the same issue did you fix this problem.

I’d suggest updating to release 6.2.0-3 if not already running that, reviewing the installation and configuration documentation, and then posting in an EVE-related forum for assistance. (EVE targets networking, devops, and security, which means telnet and ssh troubleshooting are right in the middle of all of that, too.)

If current versions and the EVE docs are insufficient to get this working, ask again in the EVE forums here: https://www.eve-ng.net/forum/

I was not able to solve this telnet issue using eve-ng software. But now using GNS3 software for macbook pro m3, followed this: https://www.youtube.com/watch?v=pqKevBcdHcc

thong198 wrote:

Update all.but still error :(((

If the problems persist with the app and macOS versions updated to current, contact the app vendor.

https://www.eve-ng.net/ indicates 5.0.1-19 is current.

The app vendor discussion forum is here: https://www.eve-ng.net/forum/

A previous report in this thread indicated a hypervisor needed an update, IIRC.

If y’all are looking to get into devops and security as can be inferred from use of this app, the app release notes, the errata, the installed versions, and the relevant forums are where all the “fun” info is, too. The sort of stuff that either helps, or trips up a project or a deployment.

But that's the correct behavior, the server is waiting for you to send the correct HTTP command so that it knows, which page it should send you.

$ telnet apple.com 80
Trying 2620:149:af0::10...
Connected to apple.com.
Escape character is '^]'.
GET / HTTP/1.1
Host: apple.com

HTTP/1.1 301 Redirect
Date: Tue, 04 Apr 2023 09:42:59 GMT
Connection: close
Via: http/1.1 nlams2-edge-bx-027.ts.apple.com (acdn/67.14256)
Cache-Control: no-store
Location: https://www.apple.com/
Content-Type: text/html
Content-Language: en
X-Cache: none
CDNUUID: c8845a53-3900-49b0-9e00-6e39eef37d01-3509093314
Content-Length: 304

<HTML>
<HEAD>
<TITLE>Document Has Moved</TITLE>
</HEAD>

<BODY BGCOLOR="white" FGCOLOR="black">
<H1>Document Has Moved</H1>
<HR>

<FONT FACE="Helvetica,Arial"><B>
Description: The document you requested has moved to a new location.  The new location is "https://www.apple.com/".
</B></FONT>
<HR>
</BODY>
Connection closed by foreign host.

But the telnet command will not help you much, most sites will send you only a redirect to their encrypted https version. You should use the `openssl` for requests:

openssl s_client -crlf -quiet -connect <host>:<port, mostly 443>

As I mentioned before, your telnet version is working fine! You have to enter the HTTP request. Just enter:

GET / HTTP/1.1
Host: apple.com

and enter a final return at the prompt, just after telnet prints out "Escape character is …".