From d71a4a6b8bb7773cef59e4dd7cb7327c68c68f2f Mon Sep 17 00:00:00 2001 From: Ada Isopods Date: Wed, 21 May 2025 23:19:25 -0600 Subject: filter by sensor --- README.md | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'README.md') diff --git a/README.md b/README.md index 7ed118b..f18bf9f 100644 --- a/README.md +++ b/README.md @@ -24,6 +24,12 @@ Options: -r, --redact-ip Redact IP addresses by converting them to 16-character hashes -i, --filter-ip FILTER_IP Filter data to a specific IP, censored hash thereof, or netmask (127.0.0.1 / 0b39f7265d91e7c3 / 127.0.0.0/16) +-u, --filter-username FILTER_USERNAME + Filter data to uses of a specific username +-p, --filter-password FILTER_PASSWORD + Filter data to uses of a specific password. Pass "[SSH_PUBKEY_ATTEMPT]" to filter for attempts to log in using an SSH public key instead of a password, which does happen +-z, --filter-sensor FILTER_SENSOR + Filter data to a certain "sensor". Useful if Cowrie is running in proxy mode to multiple endpoints -c, --no-color Don't color-code terminal output -s, --stats Print aggregated statistics -S, --only-stats Print only aggregated statistics -- cgit v1.2.3