tpotce/etc/logrotate/logrotate.conf
UncleRaymondo 85d23150b8 Numerous Changes - Multiple Conpot Honeypots Successful - See Full Desc.
Numerous changes completed to successfully have multiple Conpot Honeypots in operation

- Fix Dockerfile Build Failures by adding py-gevent and py-snmp to APK where required
- Build new dedicated images for Conpot via Default, Kamstrup and Guardian Templates
- Reconfigure IP Tables Rules
- Update all YML files with new configuration to download new Conpot images instead of T-Pot Default Conpot Image
- Configure Environment Variables in Docker Files for Image Builds
- Fix missing IPTable rule/configuration for 5060/udp for Dionaea
- Successfully test via NMAP that ports 102, 161/udp, 502, 623/udp, 10001, 47808/udp, and 50100 are open and functioning correctly

KNOWN ISSUE:
Conpot data is not available on dashboard/visualisations due to changes required for Logstash configuration.
2018-03-13 13:36:09 +11:00

38 lines
968 B
Text

/data/conpot/log/conpot_*.json
/data/conpot/log/conpot_*.log
/data/cowrie/log/cowrie.json
/data/cowrie/log/cowrie-textlog.log
/data/cowrie/log/lastlog.txt
/data/cowrie/log/ttylogs.tgz
/data/cowrie/downloads.tgz
/data/dionaea/log/dionaea.json
/data/dionaea/log/dionaea.sqlite
/data/dionaea/bistreams.tgz
/data/dionaea/binaries.tgz
/data/dionaea/dionaea-errors.log
/data/elasticpot/log/elasticpot.log
/data/elk/log/*.log
/data/emobility/log/centralsystem.log
/data/emobility/log/centralsystemEWS.log
/data/glastopf/log/glastopf.log
/data/glastopf/db/glastopf.db
/data/honeytrap/log/*.log
/data/honeytrap/log/*.json
/data/honeytrap/attacks.tgz
/data/honeytrap/downloads.tgz
/data/mailoney/log/commands.log
/data/p0f/log/p0f.json
/data/rdpy/log/rdpy.log
/data/suricata/log/*.log
/data/suricata/log/*.json
/data/vnclowpot/log/vnclowpot.log
{
su tpot tpot
copytruncate
create 760 tpot tpot
daily
missingok
notifempty
rotate 30
compress
}