vnc.tac

#!/usr/bin/env python

import struct
import thread
import sys
from twisted.internet.protocol import Protocol, Factory
from twisted.application import internet, service
from twisted.python import log
from whiteface import observable
from datetime import datetime
import os
from config import config
from pprint import pprint

LOG_FORMAT = '%(asctime)s - %(levelname)s - %(name)s[%(lineno)s] - %(message)s'

import logging
logger = logging.getLogger()
handle = logging.StreamHandler()
handle.setLevel(logging.DEBUG)
fmt = logging.Formatter(LOG_FORMAT)
handle.setFormatter(fmt)
logger.addHandler(handle)
logger.setLevel('INFO')

if os.name == 'posix' and os.getuid() == 0:
    print 'ERROR: You must not run me as root!'
    sys.exit(1)

# you MUST change these...
interface = '0.0.0.0'
USER = ''
FEED = ''
TOKEN = ''
PORTLIST = '5900'
PROTO = 'tcp'
TAGS = 'scanner,vnc'

contexts = {}

if not os.path.exists('vnc.yml'):
    logger.error('missing vnc.yml config file')
    sys.exit()

cfg = config('vnc.yml')


def log_it(peer):
    whiteface_log(peer)


def whiteface_log(peer):
    today = str(datetime.now().date())

    pprint(peer)
    pprint(contexts)
    print peer.host

    for c in contexts:
        if c != today:
            del contexts[c]

    pprint(contexts)

    if not contexts.get(today):
        contexts[today] = {}

    if not contexts[today].get(peer.host):
        contexts[today][peer.host] = 1

        log.msg('logging to whiteface...')
        ret = observable.Observable(user=cfg['user'], feed=cfg['feed'], token=cfg['token'], thing=peer.host,
                                            portlist=5900, protocol='tcp', tags='scanner,vnc').new()

        log.msg('logged to whiteface %s ' % ret['observable']['location'])


class Fake(Protocol):
    global contexts
    def connectionMade(self):
        thread.start_new_thread(log_it, (self.transport.getPeer(),))



fTS = Factory()
fTS.protocol = Fake

application = service.Application('wf-vnc')
service = internet.TCPServer(int(5900), fTS, interface=interface)
service.setServiceParent(application)