Commit Graph

34 Commits

Author SHA1 Message Date
fe7ch 03321a8455 ELK logstash sample config update (#516)
* Improvements

* Remove dns section (uses deprecated format)
* Add mutate section to remove useless data from documents

* Fixed indent.

* Bring reverse dns lookup back
2017-05-23 11:43:09 +04:00
boozezela cba7b27189 Update cowrie.service (#495) 2017-04-10 07:38:40 +04:00
Jan Dorsman 0d3c752f1e ip field in MySQL may contain hostname (#486)
* Update mysql.sql

IP field may contain hostname

* Create update11.sql
2017-03-18 10:28:49 -07:00
Michel Oosterhof 55105582cb more changes to start/stop 2017-03-07 19:17:30 +00:00
Will Godsall e4da268684 Added Graylog Documentation (#454) 2017-02-18 19:28:59 +04:00
fe7ch 53ccf45c7c Remove redundant [geoip][coordinates] field, since we already have [geoip][location] (added by geoip filter itself) (#440) 2017-02-02 18:11:15 +08:00
fe7ch cf16ff398e Elk doc update (#408)
* Update logstash's configuration to reflect changes in maxmind's geoip databases

* Update documentation on "ELK Stack"

* Add sample of filebeat configuration

* Update documentation for "ELK Stack" with FileBeat option

* Add some tips on configuration of kibana

* Remove outdated kibana-cowrie.conf

* Add link to XPack
2017-01-13 17:56:35 +04:00
dwasserm 0254a78d53 Updated to correct PIDFile path for cowrie.service (#395)
* Updated service template to use the virtual-env and proper PID file location

* Fixed PIDFile path in cowrie.service template

* Revert "Fixed PIDFile path in cowrie.service template"

This reverts commit 022afb7134.

* Revert "Revert "Fixed PIDFile path in cowrie.service template""

This reverts commit 5b01372176.

Revert changes

* Fixed PIDFile path in cowrie.service template

* Updated to correct PIDFile path for cowrie.service
2017-01-04 23:26:53 +04:00
dwasserm 439ef8499f Fixed PIDFile path in cowrie.service template (#394)
* Updated service template to use the virtual-env and proper PID file location

* Fixed PIDFile path in cowrie.service template

* Revert "Fixed PIDFile path in cowrie.service template"

This reverts commit 022afb7134.

* Revert "Revert "Fixed PIDFile path in cowrie.service template""

This reverts commit 5b01372176.

Revert changes

* Fixed PIDFile path in cowrie.service template
2017-01-04 22:19:25 +04:00
dwasserm ccbd05746e Updated service template to use the virtual-env and proper PID file location (#387) 2017-01-01 21:17:28 +04:00
Michel Oosterhof 4668ea73ac Update description 2016-10-27 17:28:16 +04:00
Daxda 6289ae5b6f Tiny improvements for the documentation (fixing anchor links) (#317) 2016-10-25 22:43:49 +04:00
Michel Oosterhof 37d281ad79 add documentation to systemd entry 2016-07-28 15:17:34 +04:00
Michel Oosterhof 7f83e43b2b update splunk docs 2016-07-19 17:52:29 +04:00
Michel Oosterhof 2a3fcee166 updated 2016-07-19 01:02:47 +04:00
Michel Oosterhof 144f1a80fd add start at boot-time 2016-07-14 07:41:44 +00:00
Michel Oosterhof 40ac3b19e8 first version of systemd service file 2016-07-14 07:28:14 +00:00
Michel Oosterhof 44c22a2110 rename utils and to bin. move docs to doc. 2016-04-28 14:44:40 +04:00
Nicolas Rouvière 92d35462c3 Add init sqlite3 script
Index are not null and automatically incremented
when they are declared INTEGER PRIMARY KEY. Thus,
the integer size declaration has been removed
2016-02-28 23:55:22 +00:00
g0tmi1k 8e3ab8a0a5 Log SSH fingerprints 2015-12-30 13:00:39 +00:00
g0tmi1k 1fea62fdee Add log size to MySQL database 2015-12-30 12:18:00 +00:00
Michel Oosterhof a5433b903d remove duplicate readme, add credit for desaster 2015-05-13 06:42:09 +00:00
Michel Oosterhof b328876e16 add shasum to install data 2015-02-10 12:04:20 +00:00
desaster 3a7bcc0ff5 Add support for logging downloaded files via dblog
New mysql table "downloads", see doc/sql/update7.sql



git-svn-id: https://kippo.googlecode.com/svn/trunk@224 951d7100-d841-11de-b865-b3884708a8e2
2013-01-08 17:31:29 +00:00
desaster 8f0eed20b3 remove unnecessary support for requesting terminal title
git-svn-id: https://kippo.googlecode.com/svn/trunk@168 951d7100-d841-11de-b865-b3884708a8e2
2010-08-19 18:19:54 +00:00
desaster c115dd3952 Updated mysql schema for the new non-blocking mysql code
git-svn-id: https://kippo.googlecode.com/svn/trunk@163 951d7100-d841-11de-b865-b3884708a8e2
2010-08-14 08:10:32 +00:00
desaster 68e5d2ec49 Rewrote the mysql code to use adbapi for non-blocking operation
NOTE: schema changes are needed! (update5.sql)


git-svn-id: https://kippo.googlecode.com/svn/trunk@162 951d7100-d841-11de-b865-b3884708a8e2
2010-08-14 07:27:38 +00:00
desaster 2452002524 SSH client version is now handled by db logging
git-svn-id: https://kippo.googlecode.com/svn/trunk@157 951d7100-d841-11de-b865-b3884708a8e2
2010-07-06 10:00:59 +00:00
desaster 00664d251a Request the window title with terminal control codes, and parse the result.
The title, as well as screen height & width are now saved to sql->sessions



git-svn-id: https://kippo.googlecode.com/svn/trunk@144 951d7100-d841-11de-b865-b3884708a8e2
2010-06-28 13:17:46 +00:00
desaster 7cb8e06949 Changes to the MySQL schema to be more like jfbethlehem's SQLite schema.
An update2.sql is provided that might update the schema without data loss,
however if you value your data, it's a good idea to create a backup first.



git-svn-id: https://kippo.googlecode.com/svn/trunk@127 951d7100-d841-11de-b865-b3884708a8e2
2010-06-17 17:11:22 +00:00
desaster b88af200e8 * Fix some dblog brokenness
* Set the ttylog column for mysql to "MEDIUMBLOB"
 * Limit the ttylog size written to the database to 10 Megabytes


git-svn-id: https://kippo.googlecode.com/svn/trunk@121 951d7100-d841-11de-b865-b3884708a8e2
2010-06-11 04:59:52 +00:00
desaster dc6432bcdd * Experimental MySQL logging; see kippo.cfg.dist and doc/sql/mysql.sql
* Initial root password now set in kippo.cfg



git-svn-id: https://kippo.googlecode.com/svn/trunk@116 951d7100-d841-11de-b865-b3884708a8e2
2010-06-08 17:37:16 +00:00
desaster 0c9be54e20 Update README
git-svn-id: https://kippo.googlecode.com/svn/trunk@64 951d7100-d841-11de-b865-b3884708a8e2
2009-11-23 16:36:54 +00:00
desaster 39c68ce598 A bunch of changes:
* filesystem has a new field A_REALFILE, which can be set to point to a real
  file within dl/ or honeyfs/ for use with cat or tar
* createfs.py update
* Added copyright texts & BSD license
* Command arguments are now parsed with shlex and passed to commands as a list
* new HoneyPotFilesystem methods: mkdir, realfile, update_realfile, is_dir
* New command: reboot
* Improved ls
* A local copy of env.commands is now kept for each session to allow dynamic
  changes
* New commands module: dice - contains random commands assigned to newly
  created files
* Improved tar - pretends to create real files now
* Something else I forgot



git-svn-id: https://kippo.googlecode.com/svn/trunk@34 951d7100-d841-11de-b865-b3884708a8e2
2009-11-20 15:48:45 +00:00