Class: Dorothy::Doro_NAM

Inherits:
Object
  • Object
show all
Defined in:
lib/dorothy2/MAM.rb

Instance Method Summary collapse

Constructor Details

#initialize(namdata) ⇒ Doro_NAM

Create a dotothy user in the NSM machine, and add this line to the sudoers :

dorothy  ALL = NOPASSWD: /usr/sbin/tcpdump, /bin/kill



209
210
211
212
213
214
 
# File 'lib/dorothy2/MAM.rb', line 209

def initialize(namdata)
  @server = namdata[:host]
  @user= namdata[:user]
  @pass= namdata[:pass]
  @port = namdata[:port]
end

Instance Method Details

#start_sniffer(vmaddress, interface, name, pcaphome) ⇒ Object 



216
217
218
219
220
221
222
223
224
 
# File 'lib/dorothy2/MAM.rb', line 216

def start_sniffer(vmaddress, interface, name, pcaphome)
  Net::SSH.start(@server, @user, :password => @pass, :port =>@port) do |@ssh|
    # @ssh.exec "nohup sudo tcpdump -i eth0 -s 1514 -w ~/pcaps/#{name}.pcap host #{vmaddress} > blah.log 2>&1 & "
    @ssh.exec "nohup sudo tcpdump -i #{interface} -s 1514 -w #{pcaphome}/#{name}.pcap host #{vmaddress} > log.tmp 2>&1 & "
    t = @ssh.exec!"ps aux |grep #{vmaddress}|grep -v grep|grep -v bash"
    pid = t.split(" ")[1]
    return pid.to_i
  end
end

#stop_sniffer(pid) ⇒ Object 



226
227
228
229
230
231
 
# File 'lib/dorothy2/MAM.rb', line 226

def stop_sniffer(pid)
  Net::SSH.start(@server, @user, :password => @pass, :port =>@port) do |ssh|
    ssh.exec "sudo kill -2 #{pid}"
    #LOGGER.info "[NAM]".yellow + "Tcpdump instance #{pid} stopped"
  end
end