Repository files navigation

Seehttp://www.secdev.org/projects/scapytain for more informations

This package depends on:

• python-cherrypy3
• python-genshi
• python-sqlobject
• python-formencode
• python-pyopenssl
• python-pysqlite (included in standard library with Python >= 2.5)
• scapy
• highlight
• graphviz

They are automatically installed during the setup.py install

Untar the archive and run

python setup.py install

Edit /etc/scapytainrc.

Set the database URI, for instance:

database = /var/lib/scapytain/scapytain.db

The scapyproxy parameter holds the command to execute the Scapy proxy,scapytain_scapyproxy by default. The web application communicates withthe proxy through stdin and stdout. The proxy is the only part that hasto run as root and be able to import Scapy. Thus, it is pessible to havethe web application run unprivileged and have

scapyproxy = sudo scapytain\_scapyproxy

You can even have Scapy run on another machine:

scapyproxy = ssh <probe@10.0.0.10> sudo scapytain\_scapyproxy

If you need authentication, add users in the file and make it readableby the application only. If you do not need authentication, set "auth"parameter tofalse.

If you need SSL: create a certificate and a key. For instance:

openssl req -new -x509 -nodes -keyout scapytain.key -out scapytain.crt

Then fill ssl_certificate and ssl_key with paths to these files.

The database is automatically created on startup, and located in the default directory.It is possible to create the database manually.

Create the database path that you configured in /etc/scapytainrc:

mkdir /var/lib/scapytain

Then create the database with the user under which you intend to runscapytain:

scapytain\_dbutil -c

./run_scapytain

Now you can browsehttp://localhost:8080 (or whatever TCP port you putin the configuration file). Click on the HELP link on the top left ofthe screen.

If you encounter internal server errors, you can set

production = False

in /etc/scapytainrc and you should have more output and backtraces inthe console you ran scapytain into.