david415 / HoneyBadger

Quantum Insert detector/recorder
GNU General Public License v3.0
305 stars 39 forks source link

Add metadata-only logging feature #6

Closed david415 closed 9 years ago

david415 commented 9 years ago

Some operators may not legally be allowed to use HoneyBadger's full-take logging facilities which is why we need a content stripping logging feature to collect statistics about TCP injection attacks.

Information about the attack that should be logged:

david415 commented 9 years ago

Obviously to complete this issue you should create another type that implements the AttackLogger interface... but of course your new attack-logger will not record payload data... only metadata... and perhaps an extra CLI option to specify whether or not to record the IP addresses.

Looky here: https://github.com/david415/HoneyBadger/blob/master/attack_logger.go