-
Notifications
You must be signed in to change notification settings - Fork 3
/
config.yml
51 lines (45 loc) · 1.99 KB
/
config.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
local_v4:
interface: wlan1
address: 192.168.1.123 # '*' can be used to listen on all addresses
gateway_mac: '48:xx:xx:f7:xx:29'
port: 6704
local_v6:
interface: wlan1
address: 'fe80::8aa3:426c:fcb0:2612:a56f:507d' # '*' can be used to listen on all addresses
gateway_mac: '48:xx:xx:f7:xx:29'
port: 6704
# IP addresses below can be v4 or v6.
# listeners and receivers of different types can be mixed and matched.
# The system will handle things automatically
# Receivers can be either UDP or TCP, but spoofing will only work with UDP. The option is ignored for TCP.
sources:
- name: brk01
source_ip: 0.0.0.0 # 0.0.0.0 can be used to accept from any/all IPv4 sources, or ::/0 can be used to accept from any/all IPv6 sources, and default_catchall_only can be used to only apply this to packets that have not already matched a different source config.
default_catchall_only: True
receivers:
- intake01
- name: dhammer
source_ip: 192.168.231.128
sticky_bytes_start: 13 # sticky_bytes_* options allow you to specify a chunk of bytes from a UDP *payload* to hash for stickiness. For example, the bytes that hold the transaction ID of a DHCP request. (0-indexed)
sticky_bytes_length: 4
receivers:
- k01
- k02
receivers:
- name: intake01
spoof: True
proto: udp
ip: 192.168.145.154
port: 3307
- name: k01
spoof: False
proto: udp
ipv_pref: 4 # When passing a hostname instead of an IP, ipv_pref can be used to prefer one IP version. If the preferred version is not found, the available one will be selected.
ip: some.example.com # NOTE: "ip" will changed to "host" in a later update.
port: 6700
- name: k02
spoof: True
preserve_udp_port: True # preserve_udp_port can be used to send the outgoing packets with the same source port as the incoming packet that's being replicated.
proto: udp
ip: 192.168.189.75
port: 6700