Class: BetterCap::Parsers::Snpp

Inherits:
Base
  • Object
show all
Defined in:
lib/bettercap/sniffer/parsers/snpp.rb

Overview

Simple Network Paging Protocol (SNPP) authentication parser.

Instance Method Summary collapse

Methods inherited from Base

available, from_cmdline, inherited, load_by_names, load_custom

Constructor Details

#initializeSnpp

Returns a new instance of Snpp.


17
18
19
# File 'lib/bettercap/sniffer/parsers/snpp.rb', line 17

def initialize
  @name = 'SNPP'
end

Instance Method Details

#on_packet(pkt) ⇒ Object


20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
# File 'lib/bettercap/sniffer/parsers/snpp.rb', line 20

def on_packet( pkt )
  begin
    if pkt.tcp_dst == 444
      lines = pkt.to_s.split(/\r?\n/)
      lines.each do |line|
        if line =~ /LOGIn\s+(.+)\s+(.+)$/
          user = $1
          pass = $2
          StreamLogger.log_raw( pkt, @name, "username=#{user} password=#{pass}" )
        end
      end
    end
  rescue
  end
end