Mirror/masscanned
1
0
Fork 0
mirror of https://github.com/ivre/masscanned.git synced 2025-10-02 06:38:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Tests: add Zeek to get passiverecon logs

Browse source
This commit is contained in:
Pierre Lalet 2021-12-09 15:11:36 +01:00
parent 1619261ebf
commit 6efcbbbf59
1 changed files with 29 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

34
test/test_masscanned.py
View file

@ -43,6 +43,8 @@ def setup_logs():
LOG = setup_logs() LOG = setup_logs()
IFACE = "tap0" IFACE = "tap0"
TCPDUMP = bool(os.environ.get("USE_TCPDUMP"))
ZEEK_PASSIVERECON = bool(os.environ.get("USE_ZEEK"))
conf.verb = 0 conf.verb = 0
# prepare configuration file for masscanned # prepare configuration file for masscanned
@ -61,9 +63,27 @@ subprocess.check_call(["ip", "route", "add", "1.2.3.4/32", "via", IPV4_ADDR])
conf.route.resync() conf.route.resync()
# start capture # start capture
tcpdump = subprocess.Popen( if TCPDUMP:
["tcpdump", "-enli", IFACE, "-w", os.path.join(OUTDIR, "test_capture.pcap")] tcpdump = subprocess.Popen(
) ["tcpdump", "-enli", IFACE, "-w", os.path.join(OUTDIR, "test_capture.pcap")]
)
if ZEEK_PASSIVERECON:
zeek = subprocess.Popen(
[
"zeek",
"-C",
"-b",
"-i",
IFACE,
"/usr/share/ivre/zeek/ivre/passiverecon/bare.zeek",
"-e",
"redef tcp_content_deliver_all_resp = T; "
"redef tcp_content_deliver_all_orig = T; "
f"redef PassiveRecon::HONEYPOTS += {{ {IPV4_ADDR}, [{IPV6_ADDR}] }}",
],
stdout=open("test/res/zeek_passiverecon.stdout", "w"),
stderr=open("test/res/zeek_passiverecon.stderr", "w"),
)
# run masscanned # run masscanned
masscanned = subprocess.Popen( masscanned = subprocess.Popen(
[ [
@ -93,6 +113,10 @@ except AssertionError:
masscanned.kill() masscanned.kill()
masscanned.wait() masscanned.wait()
# terminate capture # terminate capture
tcpdump.kill() if TCPDUMP:
tcpdump.wait() tcpdump.kill()
tcpdump.wait()
if ZEEK_PASSIVERECON:
zeek.kill()
zeek.wait()
sys.exit(result) sys.exit(result)