Argos Control Socket

Argos supplies a socket that can be -optionally- enabled to control the virtual machine remotely. The socket can be used for both input and output. It is listening on TCP port 1347 by default, but parameters can be changed by using parameters -csaddr listening_address and -csport listening_port when runnning Argos. The control socket does not provide any authentication or secure data transmission (open to patches submissions :-)).

Output

When one connects to the control socket, the current working directory of the Argos process is transmitted, as a string terminated by a new line.

During the operation of Argos, when a control socket has been enabled all alerts are redirected to the control socket. An alert can generate to type of messages:

• [ARGOS] Attack detected, code <3_letter_alert_description>
• [ARGOS] Log generated <argos.csi.random_id>

All messages are followed by a new line.

Input

Various commands can be issued over the control socket. Commands consist of a string followed by a new line. Supported commands are:

• RESET The virtual machine is reset (rebooted)
• SHUTDOWN The virtual machine is shut down (power off)
• PAUSE The virtual machine is paused
• RESUME The virtual machine is resumed

October 2006, Georgios Portokalidis