mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-10-30 20:12:53 +00:00
f9a9c8c4bf
- tweak deploy a little further - start with rebuilding Dockerfiles - rework healthcheck for adbhoney CPU issues - bump adbhoney, ciscoasa, citrixhoneypot, conpot, cowriepot, ddospot to alpine 3.19 - fix conpot issue with py 3.11 - bump conpot to latest master - bump cowrie to latest master - add autoheal to tpotinit to restart unhealthy container (if healthcheck enabled)
62 lines
1.1 KiB
INI
62 lines
1.1 KiB
INI
[common]
|
|
sensorid = conpot
|
|
|
|
[virtual_file_system]
|
|
data_fs_url = %(CONPOT_TMP)s
|
|
fs_url = tar:///usr/lib/python3.11/site-packages/conpot/data.tar
|
|
|
|
[session]
|
|
timeout = 30
|
|
|
|
[daemon]
|
|
user = conpot
|
|
group = conpot
|
|
|
|
[json]
|
|
enabled = True
|
|
filename = %(CONPOT_JSON_LOG)s
|
|
|
|
[sqlite]
|
|
enabled = False
|
|
|
|
[mysql]
|
|
enabled = False
|
|
device = /tmp/mysql.sock
|
|
host = localhost
|
|
port = 3306
|
|
db = conpot
|
|
username = conpot
|
|
passphrase = conpot
|
|
socket = tcp ; tcp (sends to host:port), dev (sends to mysql device/socket file)
|
|
|
|
[syslog]
|
|
enabled = False
|
|
device = /dev/log
|
|
host = localhost
|
|
port = 514
|
|
facility = local0
|
|
socket = dev ; udp (sends to host:port), dev (sends to device)
|
|
|
|
[hpfriends]
|
|
enabled = False
|
|
host = hpfriends.honeycloud.net
|
|
port = 20000
|
|
ident = 3Ykf9Znv
|
|
secret = 4nFRhpm44QkG9cvD
|
|
channels = ["conpot.events", ]
|
|
|
|
[taxii]
|
|
enabled = False
|
|
host = taxiitest.mitre.org
|
|
port = 80
|
|
inbox_path = /services/inbox/default/
|
|
use_https = False
|
|
|
|
[fetch_public_ip]
|
|
enabled = True
|
|
urls = ["http://whatismyip.akamai.com/", "http://wgetip.com/"]
|
|
|
|
[change_mac_addr]
|
|
enabled = False
|
|
iface = eth0
|
|
addr = 00:de:ad:be:ef:00
|