Mirror/masscanned
1
0
Fork 0
mirror of https://github.com/ivre/masscanned.git synced 2025-10-01 22:28:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Tests: add Zeek to get passiverecon logs

Browse source
This commit is contained in:
Pierre Lalet 2021-12-09 15:11:36 +01:00
parent 1619261ebf
commit 6efcbbbf59
1 changed files with 29 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

34
test/test_masscanned.py
View file

@ -43,6 +43,8 @@ def setup_logs():
LOG = setup_logs()
IFACE = "tap0"
TCPDUMP = bool(os.environ.get("USE_TCPDUMP"))
ZEEK_PASSIVERECON = bool(os.environ.get("USE_ZEEK"))
conf.verb = 0
# prepare configuration file for masscanned
@ -61,9 +63,27 @@ subprocess.check_call(["ip", "route", "add", "1.2.3.4/32", "via", IPV4_ADDR])
conf.route.resync()
# start capture
tcpdump = subprocess.Popen(
["tcpdump", "-enli", IFACE, "-w", os.path.join(OUTDIR, "test_capture.pcap")]
)
if TCPDUMP:
tcpdump = subprocess.Popen(
["tcpdump", "-enli", IFACE, "-w", os.path.join(OUTDIR, "test_capture.pcap")]
)
if ZEEK_PASSIVERECON:
zeek = subprocess.Popen(
[
"zeek",
"-C",
"-b",
"-i",
IFACE,
"/usr/share/ivre/zeek/ivre/passiverecon/bare.zeek",
"-e",
"redef tcp_content_deliver_all_resp = T; "
"redef tcp_content_deliver_all_orig = T; "
f"redef PassiveRecon::HONEYPOTS += {{ {IPV4_ADDR}, [{IPV6_ADDR}] }}",
],
stdout=open("test/res/zeek_passiverecon.stdout", "w"),
stderr=open("test/res/zeek_passiverecon.stderr", "w"),
)
# run masscanned
masscanned = subprocess.Popen(
[
@ -93,6 +113,10 @@ except AssertionError:
masscanned.kill()
masscanned.wait()
# terminate capture
tcpdump.kill()
tcpdump.wait()
if TCPDUMP:
tcpdump.kill()
tcpdump.wait()
if ZEEK_PASSIVERECON:
zeek.kill()
zeek.wait()
sys.exit(result)