Skip to content
Snippets Groups Projects
  • Pavel Valach's avatar
    9701b08c
    cowrie/wardenfiler: Store credentials for both successful and unsuccessful attempts · 9701b08c
    Pavel Valach authored
    First implementation, which uses the aggregation ID (AID) "src_ip,dst_ip" to watch all credentials used during the time window.
    
    If the login fails, the credentials are stored under the AID.
    The credentials are flushed from the AID cache either when the aggregation window expires, or when the login is successful - the unsuccessful credentials from the cache are then sent with the successful ones appended.
    9701b08c
    History
    cowrie/wardenfiler: Store credentials for both successful and unsuccessful attempts
    Pavel Valach authored
    First implementation, which uses the aggregation ID (AID) "src_ip,dst_ip" to watch all credentials used during the time window.
    
    If the login fails, the credentials are stored under the AID.
    The credentials are flushed from the AID cache either when the aggregation window expires, or when the login is successful - the unsuccessful credentials from the cache are then sent with the successful ones appended.