Dockerized Cowrie for use in T-Pot
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
dist add latest ewsposter Feb 22, 2017
doc update readme Oct 28, 2016
systemd cowrie just learnt telnet Aug 28, 2016
Dockerfile add latest ewsposter Feb 22, 2017
LICENSE initial commit for cowrie Oct 7, 2015
README.md update readme Oct 28, 2016

README.md

dockerized cowrie

cowrie is an extended fork of the medium interaction honeypot kippo.

This repository contains the necessary files to create a dockerized version of cowrie.

This dockerized version is part of the T-Pot community honeypot of Deutsche Telekom AG.

The Dockerfile contains the blueprint for the dockerized cowrie and will be used to setup the docker image.

The cowrie.cfg is tailored to fit the T-Pot environment.

The setup.sql is also tailored to fit the T-Pot environment.

The supervisord.conf is used to start cowrie under supervision of supervisord.

Using systemd, copy the systemd/cowrie.service to /etc/systemd/system/cowrie.service and start using

systemctl enable cowrie
systemctl start cowrie

This will make sure that the docker container is started with the appropriate permissions and port mappings. Further, it autostarts during boot.

By default all data will be stored in /data/cowrie/ until the honeypot service will be restarted which is by default every 24 hours. If you want to keep data persistently simply edit the service file, find the line that contains clean.sh and set the option from off to on. Be advised to establish some sort of log management if you wish to do so.

Cowrie Dashboard

Cowrie Dashboard