mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-07-02 01:27:27 -04:00
tweaking, remove honeypy => deprecated
This commit is contained in:
@ -57,11 +57,6 @@ services:
|
||||
build: heralding/.
|
||||
image: "dtagdevsec/heralding:2203"
|
||||
|
||||
# HoneyPy service
|
||||
honeypy:
|
||||
build: honeypy/.
|
||||
image: "dtagdevsec/honeypy:2203"
|
||||
|
||||
# Honeytrap service
|
||||
honeytrap:
|
||||
build: honeytrap/.
|
||||
|
18
docker/elk/logstash/dist/http_output.conf
vendored
18
docker/elk/logstash/dist/http_output.conf
vendored
@ -119,13 +119,6 @@ input {
|
||||
type => "Honeypots"
|
||||
}
|
||||
|
||||
# Honeypy
|
||||
file {
|
||||
path => ["/data/honeypy/log/json.log"]
|
||||
codec => json
|
||||
type => "Honeypy"
|
||||
}
|
||||
|
||||
# Honeysap
|
||||
file {
|
||||
path => ["/data/honeysap/log/honeysap-external.log"]
|
||||
@ -494,17 +487,6 @@ filter {
|
||||
}
|
||||
}
|
||||
|
||||
# Honeypy
|
||||
if [type] == "Honeypy" {
|
||||
date {
|
||||
match => [ "timestamp", "ISO8601" ]
|
||||
remove_field => ["timestamp"]
|
||||
remove_field => ["date"]
|
||||
remove_field => ["time"]
|
||||
remove_field => ["millisecond"]
|
||||
}
|
||||
}
|
||||
|
||||
# Honeypots
|
||||
if [type] == "Honeypots" {
|
||||
date {
|
||||
|
18
docker/elk/logstash/dist/logstash.conf
vendored
18
docker/elk/logstash/dist/logstash.conf
vendored
@ -119,13 +119,6 @@ input {
|
||||
type => "Honeypots"
|
||||
}
|
||||
|
||||
# Honeypy
|
||||
file {
|
||||
path => ["/data/honeypy/log/json.log"]
|
||||
codec => json
|
||||
type => "Honeypy"
|
||||
}
|
||||
|
||||
# Honeysap
|
||||
file {
|
||||
path => ["/data/honeysap/log/honeysap-external.log"]
|
||||
@ -494,17 +487,6 @@ filter {
|
||||
}
|
||||
}
|
||||
|
||||
# Honeypy
|
||||
if [type] == "Honeypy" {
|
||||
date {
|
||||
match => [ "timestamp", "ISO8601" ]
|
||||
remove_field => ["timestamp"]
|
||||
remove_field => ["date"]
|
||||
remove_field => ["time"]
|
||||
remove_field => ["millisecond"]
|
||||
}
|
||||
}
|
||||
|
||||
# Honeypots
|
||||
if [type] == "Honeypots" {
|
||||
date {
|
||||
|
2
docker/ews/dist/ews.cfg
vendored
2
docker/ews/dist/ews.cfg
vendored
@ -154,7 +154,7 @@ nodeid = medpot-community-01
|
||||
logfile = /data/medpot/log/medpot.log
|
||||
|
||||
[HONEYPY]
|
||||
honeypy = true
|
||||
honeypy = false
|
||||
nodeid = honeypy-community-01
|
||||
logfile = /data/honeypy/log/json.log
|
||||
|
||||
|
Reference in New Issue
Block a user