Skip to content

Conversation

@rkoshy
Copy link

@rkoshy rkoshy commented Jun 24, 2022

This is not meant to be clean code -- it's structurally sound, but was more interested in getting something working for our needs. It may be worth cleaning up.

  1. Added packetization and processing code so that individual packets could be analyzed, rather than entire TCP buffers. This also accounts for partial packets in the stream.
  2. Beginnings of "Stateful Packet" inspection and logging of connection + user
  3. Blocks certain commands - should really be configurable.

brainz80 and others added 26 commits February 16, 2021 15:43
Added the concept of connection states.
Contextual info is kept in a connection specific object.
Drastic changes to the way messages from the server are parsed.
Formatted logs to capture activity including connection, user, etc in each line - this is critical for PCI auditing
…and responses w/o actually logging the server data.
@orderbynull
Copy link
Owner

Thanks for your PR! I'll examine it carefully, clean it up if necessary, test and merge it. I'll keep you updated.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants