diff --git a/docker-compose.yml b/docker-compose.yml index c7d169b..c223a0e 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -14,7 +14,7 @@ services: interval: 5s timeout: 3s retries: 3 - start_period: 10s + start_period: 3s ftp-client: @@ -40,7 +40,7 @@ services: interval: 5s timeout: 3s retries: 3 - start_period: 10s + start_period: 3s inquisitor: container_name: inquisitor diff --git a/inquisitor/src/inquisitor.py b/inquisitor/src/inquisitor.py index 51ba084..b00db4c 100755 --- a/inquisitor/src/inquisitor.py +++ b/inquisitor/src/inquisitor.py @@ -39,7 +39,7 @@ def ftp_packet_callback(packet): This function would handle FTP packets, if needed. """ if packet.haslayer('IP') and packet.haslayer('TCP'): - if packet['TCP'].dport == 21 or packet['TCP'].sport == 21: + if packet['TCP'].dport == 21: if b"RETR" in bytes(packet['TCP'].payload): # Extract filename from FTP RETR command payload = bytes(packet['TCP'].payload).decode(errors='ignore') @@ -48,8 +48,7 @@ def ftp_packet_callback(packet): idx = parts.index("RETR") if idx + 1 < len(parts): filename = parts[idx + 1] - src_ip = packet['IP'].src - print(f"\033[92mFTP file download detected: {filename} from {src_ip}\033[0m") + print(f"\033[92mFTP file download detected: {filename} \033[0m") def start_sniffing(interface=conf.iface): """