mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-07-02 01:27:27 -04:00
Add go-pot honeypot
This commit is contained in:
17
docker/elk/logstash/dist/http_output.conf
vendored
17
docker/elk/logstash/dist/http_output.conf
vendored
@ -113,6 +113,13 @@ input {
|
||||
type => "Glutton"
|
||||
}
|
||||
|
||||
# Go-pot
|
||||
file {
|
||||
path => ["/data/go-pot/log/go-pot.json"]
|
||||
codec => json
|
||||
type => "Go-pot"
|
||||
}
|
||||
|
||||
# Hellpot
|
||||
file {
|
||||
path => ["/data/hellpot/log/hellpot.log"]
|
||||
@ -482,6 +489,16 @@ filter {
|
||||
}
|
||||
}
|
||||
|
||||
# Go-pot
|
||||
if [type] == "Go-pot" {
|
||||
if ! [dest_port] {
|
||||
drop {}
|
||||
}
|
||||
date {
|
||||
match => [ "timestamp", "ISO8601" ]
|
||||
}
|
||||
}
|
||||
|
||||
# Hellpot
|
||||
if [type] == "Hellpot" {
|
||||
date {
|
||||
|
Reference in New Issue
Block a user