bump dicompot to latest master

This commit is contained in:
t3chn0m4g3 2020-10-27 21:30:33 +00:00
parent f204cdf9b8
commit 92925cecbd
2 changed files with 7 additions and 1 deletions

View file

@ -14,7 +14,7 @@ RUN sed -i 's/dl-cdn/dl-2/g' /etc/apk/repositories && \
cd /opt/go/ && \ cd /opt/go/ && \
git clone https://github.com/nsmfoo/dicompot.git && \ git clone https://github.com/nsmfoo/dicompot.git && \
cd dicompot && \ cd dicompot && \
git checkout 17cddd73896e94fdfbfeb920023ccaf5aad5abbd && \ git checkout 41331194156bbb17078bcc1594f4952ac06a731e && \
go mod download && \ go mod download && \
go install -a -x github.com/nsmfoo/dicompot/server && \ go install -a -x github.com/nsmfoo/dicompot/server && \
# #

View file

@ -321,6 +321,7 @@ filter {
} }
mutate { mutate {
rename => { rename => {
"ID" => "id"
"IP" => "src_ip" "IP" => "src_ip"
"Port" => "src_port" "Port" => "src_port"
"AETitle" => "aetitle" "AETitle" => "aetitle"
@ -542,6 +543,11 @@ if "_grokparsefailure" in [tags] { drop {} }
convert => { "status" => "integer" } convert => { "status" => "integer" }
} }
} }
if [id] {
mutate {
convert => { "id" => "string" }
}
}
# Add T-Pot hostname and external IP # Add T-Pot hostname and external IP
if [type] == "Adbhoney" or [type] == "Ciscoasa" or [type] == "CitrixHoneypot" or [type] == "ConPot" or [type] == "Cowrie" or [type] == "Dicompot" or [type] == "Dionaea" or [type] == "ElasticPot" or [type] == "Fatt" or [type] == "Glutton" or [type] == "Honeysap" or [type] == "Honeytrap" or [type] == "Heralding" or [type] == "Honeypy" or [type] == "Ipphoney" or [type] == "Mailoney" or [type] == "Medpot" or [type] == "P0f" or [type] == "Rdpy" or [type] == "Suricata" or [type] == "Tanner" { if [type] == "Adbhoney" or [type] == "Ciscoasa" or [type] == "CitrixHoneypot" or [type] == "ConPot" or [type] == "Cowrie" or [type] == "Dicompot" or [type] == "Dionaea" or [type] == "ElasticPot" or [type] == "Fatt" or [type] == "Glutton" or [type] == "Honeysap" or [type] == "Honeytrap" or [type] == "Heralding" or [type] == "Honeypy" or [type] == "Ipphoney" or [type] == "Mailoney" or [type] == "Medpot" or [type] == "P0f" or [type] == "Rdpy" or [type] == "Suricata" or [type] == "Tanner" {