desaster / kippo

Kippo - SSH Honeypot
1.62k stars 277 forks source link

iptables -F crashes kippo #145

Closed shibumi closed 10 years ago

shibumi commented 10 years ago

Hey somebody raised an error in my kippo.log. Kippo crashed but is still running oO Just want to report this:

2014-08-08 10:41:30+0200 [SSHChannel session (0) on SSHService ssh-connection on HoneyPotTransport,XXX.XXX.XXX.XXX] channel open
2014-08-08 10:41:31+0200 [SSHChannel session (0) on SSHService ssh-connection on HoneyPotTransport,XXX.XXX.XXX.XXX] executing command "iptables -F"
2014-08-08 10:41:31+0200 [SSHChannel session (0) on SSHService ssh-connection on HoneyPotTransport,XXX.XXX.XXX.XXX] Unhandled Error
    Traceback (most recent call last):
      File "/usr/lib/python2.7/site-packages/twisted/python/log.py", line 73, in callWithContext
        return context.call({ILogContext: newCtx}, func, *args, **kw)
      File "/usr/lib/python2.7/site-packages/twisted/python/context.py", line 118, in callWithContext
        return self.currentContext().callWithContext(ctx, func, *args, **kw)
      File "/usr/lib/python2.7/site-packages/twisted/python/context.py", line 81, in callWithContext
        return func(*args,**kw)
      File "/usr/lib/python2.7/site-packages/twisted/conch/ssh/channel.py", line 137, in requestReceived
        return f(data)
    --- <exception caught here> ---
      File "/usr/lib/python2.7/site-packages/twisted/conch/ssh/session.py", line 68, in request_exec
        self.session.execCommand(pp, f)
      File "/opt/kippo/kippo/core/honeypot.py", line 464, in execCommand
        raise NotImplementedError
    exceptions.NotImplementedError: 

2014-08-08 10:41:31+0200 [HoneyPotTransport,87,XXX.XXX.XXX.XXX] connection lost
2014-08-08 12:30:10+0200 [kippo.core.honeypot.HoneyPotSSHFactory] New connection: XXX.XXX.XXX.XXX(XXX.XXX.XXX.XXX) [session: 88]
2014-08-08 12:30:41+0200 [HoneyPotTransport,88,XXX.XXX.XXX.XXX] Got remote error, code 11
    reason: Operation timeout
2014-08-08 12:30:41+0200 [HoneyPotTransport,XXX.XXX.XXX.XXX] connection lost
2014-08-08 13:20:58+0200 [kippo.core.honeypot.HoneyPotSSHFactory] New connection: XXX.XXX.XXX.XXX (XXX.XXX.XXX.XXX) [session: 89]
2014-08-08 13:21:29+0200 [HoneyPotTransport,89,XXX.XXX.XXX.XXX] Got remote error, code 11
    reason: Operation timeout
2014-08-08 13:21:29+0200 [HoneyPotTransport,89,XXX.XXX.XXX.XXX] connection lost
2014-08-08 14:12:19+0200 [kippo.core.honeypot.HoneyPotSSHFactory] New connection: XXX.XXX.XXX.XXX(XXX.XXX.XXX.XXX) [session: 90]
2014-08-08 14:12:49+0200 [HoneyPotTransport,90,XXX.XXX.XXX.XXX] Got remote error, code 11
    reason: Operation timeout
2014-08-08 14:12:49+0200 [HoneyPotTransport,90,XXX.XXX.XXX.XXX] connection lost
desaster commented 10 years ago

Although the error message looks scary, all it is really telling is that the exec support is not implemented.

However, i've just added exec support in recent commits.

shibumi commented 10 years ago

Since the crash I restarted kippo 2 times.. and kippo can't establish any connection.. reason:

error code 11 Operation timeout

Do you have any idea how I can fix this oO

EDIT: I am using the old code from code.google.com let me install the new code from github. Maybe my fault. Sorry for stealing your time