Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

3: couldn't match all kex parts #194

Open
shibumi opened this issue Oct 10, 2015 · 23 comments
Open

3: couldn't match all kex parts #194

shibumi opened this issue Oct 10, 2015 · 23 comments

Comments

@shibumi
Copy link

shibumi commented Oct 10, 2015

When I try to connect on my honeypot via ssh client I get the following error message:

Received disconnect from <IP>: 3: couldn't match all kex parts
Disconnected from <IP>

I guess it's because of twisted.. I am using:

kippo-git v0.9.282.d461745-1

with twisted:

15.1.0-1

cheers

chris

@jedisct1
Copy link

Same here. It's impossible to connect to Kippo with a recent ssh client, which is pretty sad :(

@gcarq
Copy link

gcarq commented Oct 13, 2015

Same here. I built python2-twisted (also 15.1.0-1) and noticed some failed unit tests regarding OpenSSHForwarding. I'll try with 15.2.0 and share the logs when I'm at home.

@desaster
Copy link
Owner

which ssh client / version?

@shibumi
Copy link
Author

shibumi commented Oct 14, 2015

OpenSSH_7.1p1, OpenSSL 1.0.2d 9 Jul 2015

on archlinux with kernel 4.2.2-1-ARCH

@harryharryharry
Copy link

Same here, with archlinux and with debian. I tried with older versions of twisted but without succes. my ssh version = openssh 7.1p1-1

@micheloosterhof
Copy link

Apologies for the ad, but you can try with Cowrie. http://github.com/micheloosterhof/cowrie
Mostly backwards compatible, but with a lot of extra features.

@harryharryharry
Copy link

Sadly, I use ikoniaris' fork of kippo for the elasticsearch module. Cowrie doesn't support elasticsearch logging, right ? Is it possible to get cowrie to log to elasticsearch ?

desaster added a commit that referenced this issue Oct 21, 2015
merge cowrie/cowrie@fd4ca2b from
cowrie to work around the "couldn't match all kex parts" error
@desaster
Copy link
Owner

I merged a change from cowrie to work around the issue, but I've done very minimal testing on this.

@harryharryharry
Copy link

Awesome, I'll try it out. My setup is for shits and giggles only, so I can't screw things up too badly. Thanks!

@SmUrF3R5
Copy link

this is still an issue :(
Ubuntu 14.04.5 x64

@shibumi
Copy link
Author

shibumi commented May 23, 2017

@SmUrF3R5 install cowrie instead of kippi. Kippo is not supported anymore.

@SmUrF3R5
Copy link

SmUrF3R5 commented May 23, 2017 via email

@shibumi
Copy link
Author

shibumi commented May 23, 2017

@SmUrF3R5 Yes it's working and even has more features as kippo. Cowrie is an 'official' fork of kippo. https://github.com/micheloosterhof/cowrie

@SmUrF3R5
Copy link

SmUrF3R5 commented May 24, 2017 via email

@micheloosterhof
Copy link

Hello,
Can you provide some more details?
Try without supervisor first. Are you using the default configuration? Are you able to connect to the honeypot? What do your logs say?

Supervisorctl is not part of the default install.

@SmUrF3R5
Copy link

Helps if you use the new and correct ssh port number when you reconnect after install :-) And yes you are correct I didn't realize this message was on the kippo repository. I am using MHN, that is why I have supervisorctrl
Thanks

@Kafow
Copy link

Kafow commented Sep 3, 2020

Hey, still getting this issue on openssh 7.9 with twisted 20.3.0
any idea of how to fix it?
thanks

@micheloosterhof
Copy link

@Kafow I'd suggest using https://github.com/cowrie/cowrie
Kippo hasn't been updated for a long time now.

@Kafow
Copy link

Kafow commented Sep 3, 2020

@micheloosterhof I'm using a library who depends on kippo, so unfortunately this isn't an option.

@micheloosterhof
Copy link

Which library is this?

@desaster
Copy link
Owner

desaster commented Sep 3, 2020

Twisted 20.3.0 is way too new for kippo, however that's probably not the issue. If you wanted to run kippo today with real clients, I'd recommend a rewrite with python3 and latest twisted.

@marilu95
Copy link

@micheloosterhof Estoy usando una biblioteca que depende de kippo, así que desafortunadamente esta no es una opción.

Excuse me, did you find a solution?

@insideClaw
Copy link

Everything worked up until this point - didn't notice the small text hinting it's not a recent development, or in other words, barely usable due to this issue :(

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

10 participants