mirror of https://github.com/telekom-security/tpotce.git synced 2025-04-20 06:02:24 +00:00

History

Marco Ochse 0d5d80b1e3 include docker repos ... skip emobility since it is a dev repo		2017-10-13 18:58:14 +00:00
..
dist	include docker repos	2017-10-13 18:58:14 +00:00
doc	include docker repos	2017-10-13 18:58:14 +00:00
docker-compose.yml	include docker repos	2017-10-13 18:58:14 +00:00
Dockerfile	include docker repos	2017-10-13 18:58:14 +00:00
README.md	include docker repos	2017-10-13 18:58:14 +00:00

README.md

dockerized elasticpot

elasticpot elasticpot is a simple elastic search honeypot.

This repository contains the necessary files to create a dockerized version of elasticpot.

This dockerized version is part of the T-Pot community honeypot of Deutsche Telekom AG.

The Dockerfile contains the blueprint for the dockerized elasticpot and will be used to setup the docker image.

The supervisord.conf is used to start elasticpot under supervision of supervisord.

Using systemd, copy the systemd/elasticpot.service to /etc/systemd/system/elasticpot.service and start using

systemctl enable elasticpot
systemctl start elasticpot

This will make sure that the docker container is started with the appropriate permissions and port mappings. Further, it autostarts during boot.

By default all data will be stored in /data/elasticpot/ until the honeypot service will be restarted which is by default every 24 hours. If you want to keep data persistently simply edit the service file, find the line that contains clean.sh and set the option from off to on. Be advised to establish some sort of log management if you wish to do so.

README.md

dockerized elasticpot

ElasticPot Dashboard