aljaz/cowrie
1
0
Fork 0
mirror of https://github.com/aljazceru/cowrie.git synced 2026-01-31 12:04:24 +01:00
Code Issues Packages Projects Releases Wiki Activity

rewrite ipv6 style addresses in case they are really ipv4

Browse Source
This commit is contained in:
Michel Oosterhof
2016-04-12 15:58:32 +04:00
parent e87a83c810
commit a3132e5a3d
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
cowrie/ssh/transport.py
View File

@@ -5,6 +5,7 @@
This module contains ...
"""
import re
import time
import uuid
import zlib
@@ -170,9 +171,15 @@ class HoneyPotTransport(transport.SSHServerTransport, TimeoutMixin):
"""
self.transportId = uuid.uuid4().hex[:8]
src_ip = self.transport.getPeer().host
ipv4rex = re.compile( '^::ffff:(\d+\.\d+\.\d+\.\d+)$')
ipv4_search = ipv4rex.search(src_ip)
if ipv4_search != None:
src_ip = ipv4_search.group(1)
log.msg(eventid='cowrie.session.connect',
format='New connection: %(src_ip)s:%(src_port)s (%(dst_ip)s:%(dst_port)s) [session: %(session)s]',
src_ip=self.transport.getPeer().host, src_port=self.transport.getPeer().port,
src_ip=src_ip, src_port=self.transport.getPeer().port,
dst_ip=self.transport.getHost().host, dst_port=self.transport.getHost().port,
session=self.transportId, sessionno=self.transport.sessionno)