Commit graph

65 commits

Author SHA1 Message Date
Marco Ochse
0363b218ec update logo 2017-08-30 15:12:29 +00:00
Marco Ochse
0a3b67e01c tweaking, t-pot docker tags to 1710 2017-08-28 20:03:46 +00:00
Marco Ochse
3ee9ad15d7 add mailoney, rdpy dashboards 2017-08-27 20:40:55 +00:00
Marco Ochse
56ebd9f05c include rdpy honeypot 2017-08-27 00:37:57 +00:00
Marco Ochse
fc52474fa0 add glastopf.db to logrotate.conf 2017-08-23 10:02:00 +00:00
Marco Ochse
6ff5c6b94f all dashboards are now adapted to 17.x
will probably still need some finetuning
2017-08-20 21:12:46 +00:00
Marco Ochse
6d98aaf1bd tweaking, account for new elk versions 2017-08-18 22:54:01 +00:00
Marco Ochse
277f24e0ee prepare for vnclowpot tweaking 2017-08-18 22:05:30 +00:00
Marco Ochse
26f019c894 prepare for vnclowpot and more dashboards finished 2017-08-18 22:02:51 +00:00
Marco Ochse
53f11c419c dashboards tweaking 2017-08-14 16:32:54 +00:00
Marco Ochse
796e74059e clean up 2017-08-14 15:10:21 +00:00
Marco Ochse
d1c167bd5f tweaking
allow for ftp data
forward ftp data into dionaea container
disable ipv6 since it messes up dionaea ip logging
2017-08-14 14:55:28 +00:00
Marco Ochse
adc8ddd090 tweaking
Update backup_es_folders to fit latest 17.x design
Include updated elkbase
Include updated kibana-objects
2017-08-11 20:27:20 +00:00
Marco Ochse
8e8f94b1b4 fix curator
-the old curator does not support ES 5.x
-include curator 5.1.1 and pin version to exactly that to avoid surprises with disruptive updates
-configs reside in /etc/tpot/curator
-will be started daily through /etc/crontab
-by default all logstash indices older than 90 days will be deleted
2017-08-07 13:18:55 +00:00
Marco Ochse
77a4635f59 maltrail is too far off scope 2017-07-23 10:25:40 +00:00
Marco Ochse
07c3f48894 compress and rotate logs if persistence enabled
if persistence is enabled, log files, downloads, binaries, etc. will be compressed and rotated
each start / stop of the t-pot service will account for a full rotation cycle if files are not empty
basically the rotation will recycle logs after 30 days, unless the service is stopped / started manually which will cause for a shorter period
2017-07-20 20:25:49 +00:00
Marco Ochse
022a48f1b8 tweaking 2017-07-12 18:51:20 +00:00
Marco Ochse
51e8dc1aca fix path 2017-06-21 19:34:08 +00:00
Marco Ochse
0e7563da17 prepare for honeypot changes 2017-06-21 19:26:42 +00:00
Marco Ochse
77e68f0e64 tweaking, add new honeypot
correct a typo in CONTRIBUTING.MD
preapre for and add mailoney honeypot
2017-06-15 22:08:56 +00:00
Marco Ochse
66cdb0e60a modifications for conpot update 2017-06-07 15:51:42 +00:00
Marco Ochse
4e6f4fc9e8 finetuning
add p0f
change some defaults
2017-06-06 22:32:49 +00:00
Marco Ochse
48d36f999d finetuning suricata 2017-06-03 23:56:10 +00:00
Marco Ochse
aea18d5f92 squashing some bugs
do not forward tcp connections to or from 127.0.0.1 to NFQ (fixes strange netdata behaviour)
run netdata on network mode host again (update compose files) including host metrics
2017-05-30 19:07:43 +00:00
Marco Ochse
5d8ad0a623 add spiderfoot persistence 2017-05-25 21:59:26 +00:00
Marco Ochse
2bbafbc791 handle iptables differently 2017-05-23 23:32:07 +00:00
Marco Ochse
345df08941 improvements
use docker-compose from pypi with support for 2.1 compose file version
logstash, kibana, head & netdata are now depending on a healthy elasticsearch container before starting
remove alerta-cli
tweak installer
2017-05-22 19:36:41 +00:00
Marco Ochse
931ac2dd85 tweaking
update dps.sh
adjust docker-compose related tpot configs for dionaea (stdin_open: true)
adjust tpot.service (suritcata / p0f prep) to be aware of a situation without local network route ( Fixes#99 )
2017-05-11 17:01:21 +00:00
Marco Ochse
b36c63962d tweaking, prepare for elk microservice 2017-05-03 20:55:18 +00:00
Marco Ochse
3de02ee7b0 tweaking for docker-compose
get rid of self-check scripts, docker-compose takes care of that now
use tpot.yml config for tpot scripts
wipe crontab clean of legacy scripts
check.lock no longer needed (rc.local)
adjust installer (invisible cursor, get image info from tpot.yml, some tweaking)
2017-05-01 19:03:27 +00:00
Marco Ochse
365e1a1e5c prepare switch to docker-compose 2017-04-30 23:34:30 +00:00
Marco Ochse
9fea0461fc Clean up, add Spiderfoot
tpot configs are now stored in /etc/tpot/
tpot related scripts are now stored /usr/share/tpot/bin
some scripts are improved
some scripts are cleaned of old comments
spiderfoot is now part of tpot
2017-04-19 12:22:51 +00:00
Marco Ochse
1453e26f76 prepare for forward logs to cc 2017-04-07 15:20:56 +00:00
Marco Ochse
9090b5cfd7 installer ui improvements 2017-03-22 18:27:43 +00:00
Marco Ochse
a94b34c8a8 add some colors 2017-03-15 09:28:12 +00:00
Marco Ochse
35700a731b update /etc/issue 2017-03-12 12:05:22 +00:00
Marco Ochse
9fbdcf80f5 add working solution for head 2017-02-27 17:42:34 +00:00
Marco Ochse
20759a7c5c starting with elk5 2017-02-26 11:22:56 +00:00
t3chn0m4g3
7036a7fc77 include a better solution to fetch external ip 2017-02-22 15:04:48 +00:00
Marco Ochse
3099f6f3f3 Fix broken proxy support by using curl with different IP service
... leaving comment for DNS variant
2017-02-22 15:21:10 +01:00
Marco Ochse
5f12ea7543 fix problem with ext ip resolving 2017-02-15 14:26:28 +01:00
t3chn0m4g3
091025fcfb fix bugs, issues
fix an issue with nginx upgrades where index.html was overwritten without asking
fix an issue with dashboards where positions were mixed up after removing welcome message and saving as default
2016-10-27 11:11:51 +00:00
t3chn0m4g3
40c2b2c386 fix bugs, prepare for rc 2016-10-23 14:54:57 +02:00
t3chn0m4g3
c8f2739d11 bring dashboards back, tweaking and prepare for beta 2016-10-23 10:34:08 +00:00
t3chn0m4g3
09da808e6e rename time field 2016-10-12 07:33:44 +00:00
t3chn0m4g3
f4427442e0 rename remote_addr field to src_ip 2016-10-11 12:42:18 +00:00
t3chn0m4g3
52d542a646 enable nginx JSON logging 2016-10-11 12:30:30 +00:00
t3chn0m4g3
8456878a5b tweak /ui/ location 2016-08-09 03:26:08 +00:00
t3chn0m4g3
fcbd650ba2 cleanup 2016-08-08 13:54:25 +00:00
Marco Ochse
f038173920 Web based access
It is now possible to access T-Pot web based and without a SSH tunnel
2016-08-08 02:21:02 +02:00