{"action":"created","issue":{"url":"https://api.github.com/repos/micheloosterhof/cowrie/issues/81","repository_url":"https://api.github.com/repos/micheloosterhof/cowrie","labels_url":"https://api.github.com/repos/micheloosterhof/cowrie/issues/81/labels{/name}","comments_url":"https://api.github.com/repos/micheloosterhof/cowrie/issues/81/comments","events_url":"https://api.github.com/repos/micheloosterhof/cowrie/issues/81/events","html_url":"https://github.com/micheloosterhof/cowrie/issues/81","id":121226085,"number":81,"title":"Authentication takes long time","user":{"login":"jeanbruder","id":7450442,"avatar_url":"https://avatars.githubusercontent.com/u/7450442?v=3","gravatar_id":"","url":"https://api.github.com/users/jeanbruder","html_url":"https://github.com/jeanbruder","followers_url":"https://api.github.com/users/jeanbruder/followers","following_url":"https://api.github.com/users/jeanbruder/following{/other_user}","gists_url":"https://api.github.com/users/jeanbruder/gists{/gist_id}","starred_url":"https://api.github.com/users/jeanbruder/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jeanbruder/subscriptions","organizations_url":"https://api.github.com/users/jeanbruder/orgs","repos_url":"https://api.github.com/users/jeanbruder/repos","events_url":"https://api.github.com/users/jeanbruder/events{/privacy}","received_events_url":"https://api.github.com/users/jeanbruder/received_events","type":"User","site_admin":false},"labels":[{"id":210652139,"url":"https://api.github.com/repos/micheloosterhof/cowrie/labels/question","name":"question","color":"cc317c","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":21,"created_at":"2015-12-09T12:25:25Z","updated_at":"2016-11-04T11:09:41Z","closed_at":null,"body":"```\n2015-12-09 13:19:23+0100 [cowrie.core.ssh.HoneyPotSSHFactory] New connection: X.X.X.X:10806 (192.168.1.10:2222) [session: 1]\n2015-12-09 13:19:24+0100 [HoneyPotTransport,1,X.X.X.X] Remote SSH version: SSH-2.0-PuTTY_Release_0.63\n2015-12-09 13:19:24+0100 [HoneyPotTransport,1,X.X.X.X] kex alg, key alg: diffie-hellman-group-exchange-sha1 ssh-rsa\n2015-12-09 13:19:24+0100 [HoneyPotTransport,1,X.X.X.X] outgoing: aes256-ctr hmac-sha1 none\n2015-12-09 13:19:24+0100 [HoneyPotTransport,1,X.X.X.X] incoming: aes256-ctr hmac-sha1 none\n2015-12-09 13:19:26+0100 [HoneyPotTransport,1,X.X.X.X] NEW KEYS\n2015-12-09 13:19:26+0100 [HoneyPotTransport,1,X.X.X.X] starting service ssh-userauth\n2015-12-09 13:19:26+0100 [SSHService ssh-userauth on HoneyPotTransport,1,X.X.X.X] root trying auth none\n2015-12-09 13:19:26+0100 [SSHService ssh-userauth on HoneyPotTransport,1,X.X.X.X] root trying auth keyboard-interactive\n2015-12-09 **13:19:28+0100** [SSHService ssh-userauth on HoneyPotTransport,1,X.X.X.X] login attempt [root/root] succeeded\n2015-12-09 **13:19:51+0100** [SSHService ssh-userauth on HoneyPotTransport,1,X.X.X.X] root authenticated with keyboard-interactive\n2015-12-09 13:19:51+0100 [SSHService ssh-userauth on HoneyPotTransport,1,X.X.X.X] starting service ssh-connection\n2015-12-09 13:19:52+0100 [SSHService ssh-connection on HoneyPotTransport,1,X.X.X.X] got channel session request\n2015-12-09 13:19:52+0100 [SSHChannel session (0) on SSHService ssh-connection on HoneyPotTransport,1,X.X.X.X] channel open\n2015-12-09 13:19:52+0100 [SSHChannel session (0) on SSHService ssh-connection on HoneyPotTransport,1,X.X.X.X] pty request: xterm (57, 202, 0, 0)\n2015-12-09 13:19:52+0100 [SSHChannel session (0) on SSHService ssh-connection on HoneyPotTransport,1,X.X.X.X] Terminal Size: 57 202\n2015-12-09 13:19:52+0100 [SSHChannel session (0) on SSHService ssh-connection on HoneyPotTransport,1,X.X.X.X] getting shell\n2015-12-09 13:19:52+0100 [SSHChannel session (0) on SSHService ssh-connection on HoneyPotTransport,1,X.X.X.X] openshell: <twisted.conch.ssh.session.SSHSessionProcessProtocol instance at 0xb59cf1c0>\n2015-12-09 13:19:52+0100 [SSHChannel session (0) on SSHService ssh-connection on HoneyPotTransport,1,X.X.X.X] Opening TTY Log: log/tty/20151209-131952-5d806ca7-0i.log\n```\n\nHow can we discover why the authentication takes such a long time ?\n\nThx\n"},"comment":{"url":"https://api.github.com/repos/micheloosterhof/cowrie/issues/comments/258404917","html_url":"https://github.com/micheloosterhof/cowrie/issues/81#issuecomment-258404917","issue_url":"https://api.github.com/repos/micheloosterhof/cowrie/issues/81","id":258404917,"user":{"login":"RPI3user","id":23258402,"avatar_url":"https://avatars.githubusercontent.com/u/23258402?v=3","gravatar_id":"","url":"https://api.github.com/users/RPI3user","html_url":"https://github.com/RPI3user","followers_url":"https://api.github.com/users/RPI3user/followers","following_url":"https://api.github.com/users/RPI3user/following{/other_user}","gists_url":"https://api.github.com/users/RPI3user/gists{/gist_id}","starred_url":"https://api.github.com/users/RPI3user/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/RPI3user/subscriptions","organizations_url":"https://api.github.com/users/RPI3user/orgs","repos_url":"https://api.github.com/users/RPI3user/repos","events_url":"https://api.github.com/users/RPI3user/events{/privacy}","received_events_url":"https://api.github.com/users/RPI3user/received_events","type":"User","site_admin":false},"created_at":"2016-11-04T11:09:41Z","updated_at":"2016-11-04T11:09:41Z","body":"Hi,\r\n\r\nI had the same problem (ssh long time logon) on RPI3. I read your information about installation Python LIBGM. I installed only \"python-gmpy2\" but still was the same problem. BUT...I intalled everything and I used the command:\r\napt install python-gmp*\r\n\r\nNow, my RPI3 and Kippo working fine :)\r\n\r\nThx for your posts. These informations helped me solve problem.\r\n\r\n\r\n"}}
{"actor":{"display_login":"RPI3user"}}