Rooba
/
cowrie
mirror of https://github.com/cowrie/cowrie.git
1
1
Fork 0
Code Issues Packages Projects Releases Wiki Activity

add direct-tcp to output logging framework

This commit is contained in:
Michel Oosterhof 2015-08-29 07:49:49 +00:00
parent a572c4fd15
commit dbaca05201
2 changed files with 8 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
cowrie/core/output.py
View File

@ -45,6 +45,8 @@ import socket
# KIPP0011 : Connection Lost # KIPP0011 : Connection Lost
# KIPP0012 : TTY log closed # KIPP0012 : TTY log closed
# KIPP0013 : env var requested # KIPP0013 : env var requested
# KIPP0014 : direct-tcpip request
# KIPP0015 : direct-tcpip data
class Output(object): class Output(object):
""" """

12
cowrie/core/ssh.py
View File

@ -641,19 +641,19 @@ components.registerAdapter(CowrieSFTPServer, HoneyPotAvatar, conchinterfaces.ISF
def CowrieOpenConnectForwardingClient(remoteWindow, remoteMaxPacket, data, avatar): def CowrieOpenConnectForwardingClient(remoteWindow, remoteMaxPacket, data, avatar):
remoteHP, origHP = twisted.conch.ssh.forwarding.unpackOpen_direct_tcpip(data) remoteHP, origHP = twisted.conch.ssh.forwarding.unpackOpen_direct_tcpip(data)
log.msg("direct-tcp connection attempt to %s:%i" % remoteHP) log.msg(eventid='KIPP0014', format='direct-tcp connection request to %(dst_ip)s:%(dst_port)s',
dst_ip=remoteHP[0], dst_port=remoteHP[1])
return CowrieConnectForwardingChannel(remoteHP, return CowrieConnectForwardingChannel(remoteHP,
remoteWindow=remoteWindow, remoteWindow=remoteWindow, remoteMaxPacket=remoteMaxPacket,
remoteMaxPacket=remoteMaxPacket,
avatar=avatar) avatar=avatar)
class CowrieConnectForwardingChannel(forwarding.SSHConnectForwardingChannel): class CowrieConnectForwardingChannel(forwarding.SSHConnectForwardingChannel):
def channelOpen(self, specificData): def channelOpen(self, specificData):
log.msg("Faking channel open %s:%i" % self.hostport) pass
def dataReceived(self, data): def dataReceived(self, data):
log.msg("received data %s" % repr(data)) log.msg(eventid='KIPP0015', format='direct-tcp forward to %(dst_ip)s:%(dst_port)s with data %(data)s',
dst_ip=self.hostport[0], dst_port=self.hostport[1], data=repr(data))
# vim: set et sw=4 et: # vim: set et sw=4 et: