aljaz/cowrie
1
0
Fork 0
mirror of https://github.com/aljazceru/cowrie.git synced 2025-12-17 22:14:19 +01:00
Code Issues Packages Projects Releases Wiki Activity

Log SSH fingerprints

Browse Source
This commit is contained in:
g0tmi1k
2015-12-30 13:00:39 +00:00
parent 1fea62fdee
commit 8e3ab8a0a5
4 changed files with 30 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
cowrie/insults/insults.py
View File

@@ -160,8 +160,10 @@ class LoggingServerProtocol(insults.ServerProtocol):
if self.ttylog_open: if self.ttylog_open:
size = self.ttylog_size[self.ttylog_file] size = self.ttylog_size[self.ttylog_file]
log.msg(eventid='COW0012', format='Closing TTY Log: %(ttylog)s', log.msg(eventid='COW0012',
ttylog=self.ttylog_file, size=size) format='Closing TTY Log: %(ttylog)s',
ttylog=self.ttylog_file,
size=size)
ttylog.ttylog_close(self.ttylog_file, time.time()) ttylog.ttylog_close(self.ttylog_file, time.time())
self.ttylog_open = False self.ttylog_open = False

4
cowrie/output/mysql.py
View File

@@ -190,4 +190,8 @@ class Output(cowrie.core.output.Output):
'INSERT INTO `ttylog` (`session`, `ttylog`, `size`) VALUES (%s, %s, %s)', 'INSERT INTO `ttylog` (`session`, `ttylog`, `size`) VALUES (%s, %s, %s)',
(entry["session"], entry["ttylog"], entry["size"])) (entry["session"], entry["ttylog"], entry["size"]))
elif entry["eventid"] == 'COW0016':
self.simpleQuery(
'INSERT INTO `keyfingerprints` (`session`, `username`, `fingerprint`) VALUES (%s, %s, %s)',
(entry["session"], entry["username"], entry["fingerprint"]))
# vim: set sw=4 et: # vim: set sw=4 et:

22
doc/sql/mysql.sql
View File

@@ -1,4 +1,4 @@
CREATE TABLE `auth` ( CREATE TABLE IF NOT EXISTS `auth` (
`id` int(11) NOT NULL auto_increment, `id` int(11) NOT NULL auto_increment,
`session` char(32) NOT NULL, `session` char(32) NOT NULL,
`success` tinyint(1) NOT NULL, `success` tinyint(1) NOT NULL,
@@ -8,13 +8,13 @@ CREATE TABLE `auth` (
PRIMARY KEY (`id`) PRIMARY KEY (`id`)
) ; ) ;
CREATE TABLE `clients` ( CREATE TABLE IF NOT EXISTS `clients` (
`id` int(4) NOT NULL auto_increment, `id` int(4) NOT NULL auto_increment,
`version` varchar(50) NOT NULL, `version` varchar(50) NOT NULL,
PRIMARY KEY (`id`) PRIMARY KEY (`id`)
) ; ) ;
CREATE TABLE `input` ( CREATE TABLE IF NOT EXISTS `input` (
`id` int(11) NOT NULL auto_increment, `id` int(11) NOT NULL auto_increment,
`session` char(32) NOT NULL, `session` char(32) NOT NULL,
`timestamp` datetime NOT NULL, `timestamp` datetime NOT NULL,
@@ -25,13 +25,13 @@ CREATE TABLE `input` (
KEY `session` (`session`,`timestamp`,`realm`) KEY `session` (`session`,`timestamp`,`realm`)
) ; ) ;
CREATE TABLE `sensors` ( CREATE TABLE IF NOT EXISTS `sensors` (
`id` int(11) NOT NULL auto_increment, `id` int(11) NOT NULL auto_increment,
`ip` varchar(15) NOT NULL, `ip` varchar(15) NOT NULL,
PRIMARY KEY (`id`) PRIMARY KEY (`id`)
) ; ) ;
CREATE TABLE `sessions` ( CREATE TABLE IF NOT EXISTS `sessions` (
`id` char(32) NOT NULL, `id` char(32) NOT NULL,
`starttime` datetime NOT NULL, `starttime` datetime NOT NULL,
`endtime` datetime default NULL, `endtime` datetime default NULL,
@@ -43,7 +43,7 @@ CREATE TABLE `sessions` (
KEY `starttime` (`starttime`,`sensor`) KEY `starttime` (`starttime`,`sensor`)
) ; ) ;
CREATE TABLE `ttylog` ( CREATE TABLE IF NOT EXISTS `ttylog` (
`id` int(11) NOT NULL auto_increment, `id` int(11) NOT NULL auto_increment,
`session` char(32) NOT NULL, `session` char(32) NOT NULL,
`ttylog` varchar(100) NOT NULL, `ttylog` varchar(100) NOT NULL,
@@ -51,7 +51,7 @@ CREATE TABLE `ttylog` (
PRIMARY KEY (`id`) PRIMARY KEY (`id`)
) ; ) ;
CREATE TABLE `downloads` ( CREATE TABLE IF NOT EXISTS `downloads` (
`id` int(11) NOT NULL auto_increment, `id` int(11) NOT NULL auto_increment,
`session` CHAR( 32 ) NOT NULL, `session` CHAR( 32 ) NOT NULL,
`timestamp` datetime NOT NULL, `timestamp` datetime NOT NULL,
@@ -61,3 +61,11 @@ CREATE TABLE `downloads` (
PRIMARY KEY (`id`), PRIMARY KEY (`id`),
KEY `session` (`session`,`timestamp`) KEY `session` (`session`,`timestamp`)
) ; ) ;
CREATE TABLE IF NOT EXISTS `keyfingerprints` (
`id` int(11) NOT NULL auto_increment,
`session` CHAR( 32 ) NOT NULL,
`username` varchar(100) NOT NULL,
`fingerprint` varchar(100) NOT NULL,
PRIMARY KEY (`id`)
) ;

7
doc/sql/update10.sql Normal file
View File

@@ -0,0 +1,7 @@
CREATE TABLE `keyfingerprints` (
`id` int(11) NOT NULL auto_increment,
`session` CHAR( 32 ) NOT NULL,
`username` varchar(100) NOT NULL,
`fingerprint` varchar(100) NOT NULL,
PRIMARY KEY (`id`),
) ;