Class: BetterCap::Parsers::Snpp

Inherits:
Base
  • Object
show all
Defined in:
lib/bettercap/sniffer/parsers/snpp.rb

Overview

Simple Network Paging Protocol (SNPP) authentication parser.

Instance Method Summary collapse

Methods inherited from Base

available, from_cmdline, from_exclusion_list, inherited, load_by_names, load_custom, #match_port?

Constructor Details

#initialize ⇒ Snpp

Returns a new instance of Snpp.



22
23
24
 
# File 'lib/bettercap/sniffer/parsers/snpp.rb', line 22

def initialize
  @name = 'SNPP'
end

Instance Method Details

#on_packet(pkt) ⇒ Object 



25
26
27
28
29
30
31
32
33
34
35
36
37
 
# File 'lib/bettercap/sniffer/parsers/snpp.rb', line 25

def on_packet( pkt )
  return unless pkt.tcp_dst == 444

  lines = pkt.to_s.split(/\r?\n/)
  lines.each do |line|
    if line =~ /LOGIn\s+(.+)\s+(.+)$/
      user = $1
      pass = $2
      StreamLogger.log_raw( pkt, @name, "username=#{user} password=#{pass}" )
    end
  end
rescue
end