diff --git a/warden3/contrib/connectors/hp-dio/README b/warden3/contrib/connectors/hp-dio/README index 2921f5caf803020e8b2af0ef316f20a25cae7dee..d3f45a5d3a7589ce9784460bfdd339943e54bc2f 100644 --- a/warden3/contrib/connectors/hp-dio/README +++ b/warden3/contrib/connectors/hp-dio/README @@ -39,6 +39,9 @@ D. Configuration warden_client-dio.cfg warden - path to warden-client config, e.g. 'warden/warden_client.cfg' name - sensor's source id used as a source of events, e.g. 'cz.cesnet.server.dionaea' + secret - secret to authenticate client + - if 'secret' is non empty, is used instead of value in client's configuration + - useful while using more sensors with single client's configuration anonymised - no | yes | omit - no (default value) diff --git a/warden3/contrib/connectors/hp-dio/warden3-dio-sender.py b/warden3/contrib/connectors/hp-dio/warden3-dio-sender.py index 646ac29c791482cf4f6b81a36bcefd9cd5c7baa2..32b917c2a83c9c79f31d55f6032396fb473c918b 100644 --- a/warden3/contrib/connectors/hp-dio/warden3-dio-sender.py +++ b/warden3/contrib/connectors/hp-dio/warden3-dio-sender.py @@ -31,6 +31,7 @@ DEFAULT_CONTENT_TYPE = 'application/octet-stream' DEFAULT_CONTENT_ENCODING = 'base64' DEFAULT_ANONYMISED = 'no' DEFAULT_TARGET_NET = '0.0.0.0/0' +DEFAULT_SECRET = '' def gen_attach_idea(logger, report_binaries, binaries_path, filename, hashtype, hashdigest, vtpermalink, avref): @@ -143,9 +144,13 @@ def main(): wconfig = read_cfg(aconfig.get('warden', DEFAULT_WCONFIG)) aname = aconfig.get('name', DEFAULT_NAME) + wconfig['name'] = aname + asecret = aconfig.get('secret', DEFAULT_SECRET) + if asecret: + wconfig['secret'] = asecret + wclient = Client(**wconfig) - wconfig['name'] = aname awin = aconfig.get('awin', DEFAULT_AWIN) * 60 abinpath = aconfig.get('binaries_path', DEFAULT_BINPATH) diff --git a/warden3/contrib/connectors/hp-dio/warden_client-dio.cfg b/warden3/contrib/connectors/hp-dio/warden_client-dio.cfg index 391c9cc560b1c49053b17a9fa456aaba2e8ab092..537d96ab12e92c58163b9c2c1a34e8962bc6f714 100644 --- a/warden3/contrib/connectors/hp-dio/warden_client-dio.cfg +++ b/warden3/contrib/connectors/hp-dio/warden_client-dio.cfg @@ -1,6 +1,7 @@ { "warden": "warden_client.cfg", "name": "cz.cesnet.server.dionaea", + "secret": "", "anonymised": "no", "target_net": "195.113.0.0/16",