search

ikoniaris / kippo-graph

Visualize statistics from a Kippo SSH honeypot
http://bruteforce.gr/kippo-graph
Other
134 stars 54 forks source link

Not all TTY Seesions are displayed in the Playlog #64

Open jdmoore0883 opened 6 years ago

jdmoore0883 commented 6 years ago

Some sessions are able to replay without issue at all. But for some reason there are some 'missing' sessions in the playlog page. There are no errors in any logs at all... nothing in apache logs, nothing in the PHP logs, nothing in cowrie logs, nothing in syslogs, etc...

Taking a look at the playlog page, I can see the following: capture1

But if I take a a look at the actual filesystem, there are a few more TTY logs: image

Why is there such a discrepancy? How to go about fixing it? Is there some 'debugs' I could enable to gather more info as to what might be going on?

DaveFH commented 6 years ago

I've got the same problem...

nearly 25 ttylogs in SQL DB

image

but only one is displayed:

image

No errors in Apache LOG, no errors show on php