I-Usbrip: isixhobo sokulandela izixhobo ze-USB

Usbrip

Xa kunjalo umlawuli weenkqubo uhlala ngaphakathi leyona misebenzi yemihla ngemihla abaqhele ukuyenza (ukongeza ekudaleni nasekufumaneni kwakhona iiphasiwedi ze-imeyile), kukho ukugcinwa nokubekwa esweni kwezixhobo.

Apho ngokubanzi, ukunqanda iingxaki ezininzi, ukusebenza kwesixhobo ngokubhekisele kufakelo lwesicelo kuhlala kuncitshisiwe kwaye ukongeza ekwenzeni ezinye izithintelo ngaphakathi kwenethiwekhi yeshishini. Kule misebenzi iqhelekileyo, uninzi luye luthande ukubajongela phantsi abasebenzi osebenzisa izixhobo, ngokwenza kuphela umda olula.

Bambalwa abalawuli lweenkqubo inoxanduva lweekhompyuter zeLinux ukuqokelela ikernel ngokwabo ukuze ukwazi ukwenza izithintelo, apho amazibuko e-USB edlula ngokubanzi.

Kulapho isixhobo esikhulu singena khona. endiyifumene kwi-surfing yomnatha. Igama lakhe ngu usbrip, ethi ngamazwi oMdali wayo

"Sisixhobo esivulekileyo somthombo wophando kunye nonxibelelwano lweCLI ekuvumela ukuba ugcine umkhondo wezixhobo ze-USB (okt imbali yomsitho we-USB) koomatshini beLinux"

I-USBRip ikuvumela ukuba ujonge ngokukhawuleza ngokucacileyo ngokuhlalutya iigodo zeLinux. Le software incinci ibhalwe kwiPython 3 emsulwa (kusetyenziswa iimodyuli zangaphandle) ezihambisa iifayile zeLinux ( / var / log / syslog * kunye / var / log / imiyalezo * kuxhomekeke kunikezelo) ukwakha iitafile zembali yomsitho we-USB.

Kulwazi olunikezelayo, oku kulandelayo kuyaboniswa: Umhla kunye nexesha lokungena, umsebenzisi, i-ID yomboneleli, i-ID yemveliso, umenzi, inombolo yesiriyeli, izibuko kunye nomhla kunye nexesha lokuphuma.

Ukongeza, unga:

  • Ukuthumela ngaphandle ulwazi oluqokelelweyo njengendawo yokulahla iJSON (kwaye uvule ezo ndawo zokulahla, kunjalo);
  • ukuvelisa uluhlu lwezixhobo ze-USB ezigunyazisiweyo (ezithembakeleyo) njengeJSON (yibize auth.json).
  • Khangela imicimbi "yolwaphulo-mthetho" esekwe kwi-auth.json: bonisa (okanye uvelise enye ngeJSON) izixhobo ze-USB ezivela kwimbali kwaye ezingabonakali kwi-auth.json.
  • Xa ifakwe kunye -s * yenza iindawo ezifihliweyo (7zip archives) ukubuyisela emuva kunye nokuqokelela imicimbi ye-USB ngokuzenzekelayo ngoncedo lwe-crontab. Ukongeza ekubeni nakho ukukhangela iinkcukacha ezongezelelweyo malunga nesixhobo esithile se-USB esekwe kwi-VID kunye / okanye kwi-PID.

usbrip1

Uyifaka njani i-Usbrip kwiLinux?

Kulabo abanomdla wokukwazi ukufaka esi sixhobo, kufuneka ifakwe iPython 3 kwinkqubo yakho kunye nombhobho (Inkqubo yolawulo lwephakheji yePython)

Ukufaka i-Usbrip vula nje itheminali kwaye uchwetheze lo myalelo ulandelayo:

pip3 install usbrip
pip install terminaltables termcolor
pip install tqdm

Ngoku ngendlela efanayo Banokukhuphela ikhowudi yeprojekthi kwaye basebenzise isixhobo apho. Ukwenza oku, kuya kufuneka bachwetheze kuphela kwisiphelo sendlela:

git clone https://github.com/snovvcrash/usbrip.git usbrip

Kwaye emva koko bangena kulawulo nge:

cd usbrip

Kwaye sisombulula ukuxhomekeka ngo:

python3 -m venv venv && source venv/bin/activate

Ukusetyenziswa kwe-Usbrip

Sebenzisa esi sixhobo ngokuthe ngqo ngokuthe ngqo. Lo nto ukubona imbali yeziganeko esenza nje lo myalelo ulandelayo:

usbrip events history

O

python3 usbrip.py events history

Apho iziganeko ziya kuboniswa khona. Ngendlela efanayo, banokucoca ngeentsuku okanye uluhlu olukhethekileyo.

Ngokomzekelo

usbrip events history -e -d "Oct 10" "Oct 11" "Oct 12" "Oct 13" “Oct 14" "Oct 15"

O

python3 usbrip.py events history -e -d "Oct 10" "Oct 11" "Oct 12" "Oct 13" “Oct 14" "Oct 15"

Ngale nyathelo, ulwazi lwazo zonke izixhobo zangaphandle ze-USB ezixhume kwizixhobo ziya kuboniswa ngexesha elisusela kwi-Okthobha ye-10 ukuya kwi-15.

Ukusebenza ngezihluzi. Zine iindidi zokucoca ezikhoyo: Iziganeko zangaphandle ze-USB kuphela (izixhobo ezinokususwa ngokulula -e); ngomhla (-d); ngamabala (-user, -vid, -pid, -product, -mveliso, -serial, -port) kunye nenani lezinto ezifunyenweyo njenge-output (-n).

Ukuvelisa ifayile yeJSON ngeziganeko:

usbrip events gen_auth /ruta/para/el/archivo.json -a vid pid -n 10 -d '2019-10-30'

O

python3 usbrip.py events gen_auth /ruta/para/el/archivo.json -a vid pid -n 10 -d '2019-10-30'

Iya kuba nenolwazi ngezixhobo zokuqala ezili-10 eziqhagamshelwe ngo-Okthobha 30, 2019.

Ukuba ufuna ukwazi ngakumbi malunga nokusetyenziswa kwesi sixhobo unga jonga eli khonkco lilandelayo.


Shiya uluvo lwakho

Idilesi yakho ye email aziyi kupapashwa. ezidingekayo ziphawulwe *

*

*

  1. Uxanduva lwedatha: UMiguel Ángel Gatón
  2. Injongo yedatha: Ulawulo lwe-SPAM, ulawulo lwezimvo.
  3. Umthetho: Imvume yakho
  4. Unxibelelwano lwedatha: Idatha ayizukuhanjiswa kubantu besithathu ngaphandle koxanduva lomthetho.
  5. Ukugcinwa kweenkcukacha
  6. Amalungelo: Ngalo naliphi na ixesha unganciphisa, uphinde uphinde ucime ulwazi lwakho.