Dockerized Dionaea for use in T-Pot
Latest commit 3781f61 Feb 22, 2017 @t3chn0m4g3 t3chn0m4g3 add updated ews poster
Permalink
Failed to load latest commit information.
dist
doc
etc fix paths Aug 5, 2016
systemd update dionaea to latest version Sep 24, 2016
Dockerfile
LICENSE
README.md update readme Oct 28, 2016

README.md

dockerized dionaea

dionaea is a low interaction honeypot with focus on capturing malware.

This repository contains the necessary files to create a dockerized version of dionaea.

This dockerized version is part of the T-Pot community honeypot of Deutsche Telekom AG.

The Dockerfile contains the blueprint for the dockerized dionaea and will be used to setup the docker image.

The dionaea.conf is tailored to fit the T-Pot environment.

The supervisord.conf is used to start dionaea under supervision of supervisord.

Using systemd, copy the systemd/dionaea.service to /etc/systemd/system/dionaea.service and start using

systemctl enable dionaea
systemctl start dionaea

This will make sure that the docker container is started with the appropriate permissions and port mappings. Further, it autostarts during boot.

By default all data will be stored in /data/dionaea/ until the honeypot service will be restarted which is by default every 24 hours. If you want to keep data persistently simply edit the service file, find the line that contains clean.sh and set the option from off to on. Be advised to establish some sort of log management if you wish to do so.

Dionaea Dashboard

Dionaea Dashboard