tyler.durden/pandorafms
1
0
Fork 0
mirror of https://github.com/pandorafms/pandorafms.git synced 2025-07-29 08:45:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

Skip localhost listening ports

Browse Source
This commit is contained in:
Enrique Martin 2023-10-09 10:37:13 +02:00
parent 861c23e6c6
commit dd92c00253
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
pandora_agents/unix/plugins/pandora_security_check
View File

@ -14,6 +14,7 @@ use File::Basename;
use File::Spec; use File::Spec;
use Digest::MD5 qw(md5_hex); use Digest::MD5 qw(md5_hex);
use Scalar::Util 'looks_like_number'; use Scalar::Util 'looks_like_number';
use Socket;
# Define signal handlers # Define signal handlers
sub sigint_handler { sub sigint_handler {
@ -456,11 +457,20 @@ if ($check_ports) {
chomp $line; chomp $line;
my @parts = split /\s+/, $line; my @parts = split /\s+/, $line;
if (scalar @parts >= 12) { if (scalar @parts >= 12) {
my $local_addr_hex = (split /:/, $parts[2])[0];
my $local_port_hex = (split /:/, $parts[2])[1]; my $local_port_hex = (split /:/, $parts[2])[1];
my $state = $parts[4]; my $state = $parts[4];
# Check if the connection is in state 0A (listening) # Check if the connection is in state 0A (listening)
if ($state eq "0A") { if ($state eq "0A") {
my $local_addr_4 = join('.', reverse split(/\./, inet_ntoa(pack("N", hex($local_addr_hex)))));
my $local_addr_6 = join(':', map { hex($_) } unpack("(A4)*", $local_addr_hex));
# Skip localhost listening ports
if ($local_addr_4 eq "127.0.0.1" || $local_addr_6 eq "0:0:0:0:0:0:0:1") {
next;
}
my $local_port = hex($local_port_hex); my $local_port = hex($local_port_hex);
push @open_ports, $local_port; push @open_ports, $local_port;
} }