mirror of
				https://github.com/telekom-security/tpotce.git
				synced 2025-10-26 10:14:45 +00:00 
			
		
		
		
	
		
			
	
	
		
			67 lines
		
	
	
	
		
			1.5 KiB
		
	
	
	
		
			INI
		
	
	
	
	
	
		
		
			
		
	
	
			67 lines
		
	
	
	
		
			1.5 KiB
		
	
	
	
		
			INI
		
	
	
	
	
	
|   | [dionaea] | ||
|  | download.dir=/opt/dionaea/var/dionaea/binaries/ | ||
|  | modules=curl,python,emu | ||
|  | processors=filter_streamdumper,filter_emu | ||
|  | 
 | ||
|  | listen.mode=getifaddrs | ||
|  | # listen.addresses=127.0.0.1 | ||
|  | # listen.interfaces=eth0,tap0 | ||
|  | 
 | ||
|  | # Country | ||
|  | ssl.default.c=CN | ||
|  | # Common Name/domain name | ||
|  | ssl.default.cn= | ||
|  | # Organization | ||
|  | ssl.default.o= | ||
|  | # Organizational Unit | ||
|  | ssl.default.ou= | ||
|  | 
 | ||
|  | [logging] | ||
|  | #default.filename=/opt/dionaea/var/dionaea/dionaea.log | ||
|  | #default.levels=all | ||
|  | #default.domains=* | ||
|  | 
 | ||
|  | errors.filename=/opt/dionaea/var/dionaea/dionaea-errors.log | ||
|  | errors.levels=warning,error | ||
|  | errors.domains=* | ||
|  | 
 | ||
|  | [processor.filter_streamdumper] | ||
|  | name=filter | ||
|  | config.allow.0.types=accept | ||
|  | config.allow.1.types=connect | ||
|  | config.allow.1.protocols=ftpctrl | ||
|  | config.deny.0.protocols=ftpdata,ftpdatacon,xmppclient | ||
|  | next=streamdumper | ||
|  | 
 | ||
|  | [processor.streamdumper] | ||
|  | name=streamdumper | ||
|  | config.path=/opt/dionaea/var/dionaea/bistreams/%Y-%m-%d/ | ||
|  | 
 | ||
|  | [processor.filter_emu] | ||
|  | name=filter | ||
|  | config.allow.0.protocols=smbd,epmapper,nfqmirrord,mssqld | ||
|  | next=emu | ||
|  | 
 | ||
|  | [processor.emu] | ||
|  | name=emu | ||
|  | config.limits.files=3 | ||
|  | #512 * 1024 | ||
|  | config.limits.filesize=524288 | ||
|  | config.limits.sockets=3 | ||
|  | config.limits.sustain=120 | ||
|  | config.limits.idle=30 | ||
|  | config.limits.listen=30 | ||
|  | config.limits.cpu=120 | ||
|  | #// 1024 * 1024 * 1024 | ||
|  | config.limits.steps=1073741824 | ||
|  | 
 | ||
|  | [module.nl] | ||
|  | # set to yes in case you are interested in the mac address  of the remote (only works for lan) | ||
|  | lookup_ethernet_addr=yes | ||
|  | 
 | ||
|  | [module.python] | ||
|  | imports=dionaea.log,dionaea.services,dionaea.ihandlers | ||
|  | sys_paths=default | ||
|  | service_configs=/opt/dionaea/etc/dionaea/services/*.yaml | ||
|  | ihandler_configs=/opt/dionaea/etc/dionaea/ihandlers/*.yaml |