Commit Graph

67 Commits

Author SHA1 Message Date
noamkov 50b31b409b VT: scan only new files (#968) 2018-12-04 12:01:11 +04:00
Michel Oosterhof 305b9b73c3
remove legacy (splunksdk) splunk output plugin (#961) 2018-11-14 23:17:30 +04:00
Michel Oosterhof 8ca39676fd
document hec http/https (#954) 2018-11-07 18:54:14 +04:00
Michel Oosterhof b7ceb7eca4
userdb.example (#922) 2018-10-13 18:21:16 +04:00
Michel Oosterhof 7aee48df3f
Fabiola busch unix timestamp (#886)
* Add UNIX millisecond epoch time format for logging timestamp by @FabiolaBusch
2018-09-17 11:11:06 +04:00
Michel Oosterhof 95e8ac78ba ignore userdb 2018-09-08 10:07:03 +04:00
Michel Oosterhof 32d345f318 remove data_path, add warning on file not found 2018-09-07 18:49:09 +04:00
Florian Pelgrim 891f5da3b5 Refactor UserDB config files (#874)
The data_path has changed to etc/. I'm not really happy with this but
I didn't had a better idea since we allow configs to be in ., etc/ and
/etc. Maybe we wanna changes this behaviour when we have a stable docker
release.

If the userdb.txt is not found Cowrie will load a default list.
The parser is now also a bit less error prone when parsing this file.
2018-09-07 18:45:13 +04:00
Michel Oosterhof 63930fbd46 tty logs in state directory 2018-08-25 03:08:54 +04:00
Florian Pelgrim be3a7235a5 Small config changes (#845)
* Adding /etc/cowrie/cowrie.cfg to possible configurations

We want also to look for /etc/cowrie/cowrie.cfg as a possible
configuration.

* Write ssh host keys into /var/lib/cowrie

Dynamical data should be written into /var/lib/cowrie.
I know that OpenSSH is doing this but we are not OpenSSH and we should
have only stuff written below /var.
So /var/log/cowrie and /var/lib/cowrie.

* Moving log and dl below var/, cleanup old folders

This helps keeping the writes of the daemon in one place and makes it
easier later when building a cowrie package.

Old paths have been removed from the repository to keep it clean.

* Fixing wrong log path

Path should be var/log/cowrie not var/log

* Fixing json output

The json output was not configured to use the default log path. This has
been fixed now.

* Change order of config reads

According to @micheloosterhof there is an order of precedence here.
2018-08-25 03:02:56 +04:00
Michel Oosterhof 15bc61e519 reference log_path instead of directory name 2018-08-11 22:18:18 +04:00
Michel Oosterhof 07594c4add split readonly/readwrite, as suggested by @craneworks 2018-08-11 22:15:33 +04:00
Michel Oosterhof 48adc3160a doc/ -> docs/ 2018-07-20 22:12:30 +04:00
Michel Oosterhof b584287e3a .dist file goes to etc/ 2018-07-20 14:39:49 +04:00
Michel Oosterhof bd85817f2d Revert "move cfg.dist file"
This reverts commit 77d2744403.
2016-11-14 09:24:34 +04:00
Michel Oosterhof 77d2744403 move cfg.dist file 2016-11-14 09:19:15 +04:00
Michel Oosterhof e3d3891d29 Add etc/ and var/ directory structure for future use 2016-10-24 14:53:43 +04:00