Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Initial work on adding audit capabilities to lottip #12

Open
wants to merge 26 commits into
base: master
Choose a base branch
from

Conversation

rkoshy
Copy link

@rkoshy rkoshy commented Jun 24, 2022

This is not meant to be clean code -- it's structurally sound, but was more interested in getting something working for our needs. It may be worth cleaning up.

  1. Added packetization and processing code so that individual packets could be analyzed, rather than entire TCP buffers. This also accounts for partial packets in the stream.
  2. Beginnings of "Stateful Packet" inspection and logging of connection + user
  3. Blocks certain commands - should really be configurable.

brainz80 and others added 26 commits February 16, 2021 15:43
Added the concept of connection states.
Contextual info is kept in a connection specific object.
Drastic changes to the way messages from the server are parsed.
Formatted logs to capture activity including connection, user, etc in each line - this is critical for PCI auditing
…and responses w/o actually logging the server data.
@orderbynull
Copy link
Owner

Thanks for your PR! I'll examine it carefully, clean it up if necessary, test and merge it. I'll keep you updated.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants