Alex-Devera/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-04-20 06:02:24 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

listbot integration

Browse source
This commit is contained in:
listbot 2020-05-12 10:41:32 +00:00
parent c50d147926
commit 198305fc57
3 changed files with 9 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
docker/elk/logstash/Dockerfile
View file

@ -18,8 +18,8 @@ RUN sed -i 's/dl-cdn/dl-2/g' /etc/apk/repositories && \
# Get and install packages # Get and install packages
mkdir -p /etc/listbot && \ mkdir -p /etc/listbot && \
cd /etc/listbot && \ cd /etc/listbot && \
aria2c -s16 -x 16 http://80.158.38.137/cve.yaml.bz2 && \ aria2c -s16 -x 16 https://listbot.sicherheitstacho.eu/cve.yaml.bz2 && \
aria2c -s16 -x 16 http://80.158.38.137/iprep.yaml.bz2 && \ aria2c -s16 -x 16 https://listbot.sicherheitstacho.eu/iprep.yaml.bz2 && \
bunzip2 *.bz2 && \ bunzip2 *.bz2 && \
cd /root/dist/ && \ cd /root/dist/ && \
mkdir -p /usr/share/logstash/ && \ mkdir -p /usr/share/logstash/ && \

10
docker/elk/logstash/dist/update.sh vendored
View file

@ -22,15 +22,15 @@ for i in $mySITES;
} }
# Check for connectivity and download latest translation maps # Check for connectivity and download latest translation maps
myCHECK=$(fuCHECKINET "80.158.38.137") myCHECK=$(fuCHECKINET "listbot.sicherheitstacho.eu")
if [ "$myCHECK" == "0" ]; if [ "$myCHECK" == "0" ];
then then
echo "Connection to Github looks good, now downloading latest translation maps." echo "Connection to Listbot looks good, now downloading latest translation maps."
cd /etc/listbot cd /etc/listbot
aria2c -s16 -x 16 http://80.158.38.137/cve.yaml.bz2 && \ aria2c -s16 -x 16 https://listbot.sicherheitstacho.eu/cve.yaml.bz2 && \
aria2c -s16 -x 16 http://80.158.38.137/iprep.yaml.bz2 && \ aria2c -s16 -x 16 https://listbot.sicherheitstacho.eu/iprep.yaml.bz2 && \
bunzip2 -f *.bz2 bunzip2 -f *.bz2
cd / cd /
else else
echo "Cannot reach Github, starting Logstash without latest translation maps." echo "Cannot reach Listbot, starting Logstash without latest translation maps."
fi fi

5
docker/suricata/dist/capture-filter.bpf vendored
View file

@ -1,4 +1,3 @@
not (host sicherheitstacho.eu or community.sicherheitstacho.eu) and not (host sicherheitstacho.eu or community.sicherheitstacho.eu or listbot.sicherheitstacho.eu) and
not (host deb.debian.org) and not (host deb.debian.org) and
not (host index.docker.io or docker.io) and not (host index.docker.io or docker.io)
not (host 80.158.38.137)