Skip to content
Snippets Groups Projects
Commit 6158c8ba authored by Pavel Valach's avatar Pavel Valach
Browse files

cowrie/wardenfiler: Store aid (aggregation ID) with the session

parent c0d9bffc
No related branches found
No related tags found
1 merge request!10cowrie/wardenfiler: Store credentials for both successful and unsuccessful attempts
......@@ -198,9 +198,10 @@ class Output(cowrie.core.output.Output):
)
entry["loggedin"] = False
# AID - aggregation ID
entry["aid"] = aid = ','.join((entry["src_ip"], entry["dst_ip"]))
self.sessions[entry["session"]] = entry
ws = self.win_start or time()
aid = ','.join((entry["src_ip"], entry["dst_ip"]))
cnt = self.attackers.get(aid, 0)
if (time() - ws < self.aggr_win):
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment