willem/inquisitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

health check and double print

Browse Source
This commit is contained in:
whaffman 2025-07-11 13:33:45 +02:00
parent dd37f802d8
commit 2735b2ef15
2 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
docker-compose.yml
View File

@ -14,7 +14,7 @@ services:
interval: 5s
timeout: 3s
retries: 3
start_period: 10s
start_period: 3s
ftp-client:
@ -40,7 +40,7 @@ services:
interval: 5s
timeout: 3s
retries: 3
start_period: 10s
start_period: 3s
inquisitor:
container_name: inquisitor

5
inquisitor/src/inquisitor.py
View File

@ -39,7 +39,7 @@ def ftp_packet_callback(packet):
This function would handle FTP packets, if needed.
"""
if packet.haslayer('IP') and packet.haslayer('TCP'):
if packet['TCP'].dport == 21 or packet['TCP'].sport == 21:
if packet['TCP'].dport == 21:
if b"RETR" in bytes(packet['TCP'].payload):
# Extract filename from FTP RETR command
payload = bytes(packet['TCP'].payload).decode(errors='ignore')
@ -48,8 +48,7 @@ def ftp_packet_callback(packet):
idx = parts.index("RETR")
if idx + 1 < len(parts):
filename = parts[idx + 1]
src_ip = packet['IP'].src
print(f"\033[92mFTP file download detected: {filename} from {src_ip}\033[0m")
print(f"\033[92mFTP file download detected: {filename} \033[0m")
def start_sniffing(interface=conf.iface):
"""