search

OWASP / Python-Honeypot

OWASP Honeypot, Automated Deception Framework.
https://www.secologist.com/
Apache License 2.0
429 stars 138 forks source link

network thread issue #359

Open Ali-Razmjoo opened 2 years ago

Ali-Razmjoo commented 2 years ago

two issues

  1. network thread is not terminating after an error to reproduce the issue, run a module, and then kill the container with docker kill container_name. OHP is expected to exit from working and throw an error, but the network thread stays open and it's not terminating.

  2. when I press ctrl+c to terminate the module, pcap file is not submitted to the database.

spiderxm commented 2 years ago 
2. when I press ctrl+c to terminate the module, pcap file is not submitted to the database.

For this will need to add https://github.com/OWASP/Python-Honeypot/blob/4ea768922dbaf1b805bff7957115ea452a9384e9/core/load.py#L373-L376 code here to push the pcap files to Elasticsearch in case of interrupt

spiderxm commented 2 years ago

@Ali-Razmjoo, @dhirensr For issue 2, you must not have added the argument while running the containers.

sudo python3 ohp.py -m ftp/weak_password,ftp/strong_password --store-pcap

Add --store-pcap while starting the network capture process.