Re: [Burp-users] Determining which file is causing backup failure

[David H. R. C. <da...@ze...>]

On Fri, Aug 13, 2021 at 03:13:08PM +1000, Graham Keeling wrote:
> On Fri, Aug 13, 2021 at 12:28:34AM -0400, David H. Rhodes Clymer wrote:
> > I'm unable to backup my laptop due to an error encountered by burp.
> > 
> > I run: sudo burp -a b
> > and see:
> > 
> > ...
> > ffffdffffdffffdffdffffdffffdffffdffffdffffdffffdffdffffdffffdfff 636032
> > fdffffdffffdffffdffffdffffdffffdffffdffffdffffdffffdffffdffffdff 636096
> > ffdffffdffffdffffdffffdffdffffdffdffffdffffdffffdffffdffffdffffd 636160
> > ffffdffffdffffdffffdffffdffffdffffdffffdffffdffffdffffdffffdffff 636224
> > dffffdffffdffffdffffdffffdffffdffdffffdffffdffffdffdffffdffffdff 636288
> > ffdffffdffffdffffdffffdffffdffffdffffdffffdffffdffffddfdfffdfLfd 636352
> > fdfffdfLfdfdfffdfLfdfLfdfdffffdfLfdfdffffffffdfdfffdfLfdfdfffdfL 636416
> > fdfdfffdfLfdfLfdfdfffffdfLfdfdfffdfdfffdfLfdfdfffdfLfdfLfdfdfffd 636480
> > fdfffdfLfdfLfdfLfdfdffffdfdffffdfLfdfdfffffdfLfdfdfffffdfLfdfdff 636544
> > fdfLfdfdfffdfdfffdfLfdfdfffdfLfdfLfdfdffffdfLfdfdffffdfLfdfdffff 636608
> > dfdfffdfLfdfdfffdfLfdfLfdfLfdfdfffdfdfffdfdfffffdfLfdfLfdfdfffd2021-08-13 00:20:11 -0400: burp[82842] error in readdir: Input/output error
> >  636671
> > 
> > 2021-08-13 00:20:11 -0400: burp[82842] Error in phase 1
> > 2021-08-13 00:20:11 -0400: burp[82842] Phase 1 end (file system scan)
> > 
> > 
> > How do I determine which file or directory the error is coming from?
> > 
> > -davidc
> 
> Hello,
> 
> Is anything logged on the server side?
> Maybe the files in /var/spool/burp/(client)/working can help you.

I'll have to check this evening.

So, I guess I was thinking that phase1 was basically all client-side,
determining what files have been modified, etc. Are you suggesting
that the error I'm seeing might be server side instead, or just that
some detail may have been sent to the server, but not to
/var/log/burp-client or written to the terminal?

What exactly is happening in phase 1?

-davidc