mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-07-02 01:27:27 -04:00
67 lines
1.6 KiB
INI
67 lines
1.6 KiB
INI
[dionaea]
|
|
download.dir=/opt/dionaea/var/dionaea/binaries/
|
|
modules=curl,python,emu
|
|
processors=filter_streamdumper,filter_emu
|
|
|
|
listen.mode=getifaddrs
|
|
# listen.addresses=127.0.0.1
|
|
# listen.interfaces=eth0,tap0
|
|
|
|
# Country
|
|
ssl.default.c=AU
|
|
# Common Name/domain name
|
|
ssl.default.cn=Some-State
|
|
# Organization
|
|
ssl.default.o=Internet Widgits Pty Ltd
|
|
# Organizational Unit
|
|
ssl.default.ou=
|
|
|
|
[logging]
|
|
#default.filename=/opt/dionaea/var/dionaea/dionaea.log
|
|
#default.levels=all
|
|
#default.domains=*
|
|
|
|
errors.filename=/opt/dionaea/var/dionaea/dionaea-errors.log
|
|
errors.levels=warning,error
|
|
errors.domains=*
|
|
|
|
[processor.filter_streamdumper]
|
|
name=filter
|
|
config.allow.0.types=accept
|
|
config.allow.1.types=connect
|
|
config.allow.1.protocols=ftpctrl
|
|
config.deny.0.protocols=ftpdata,ftpdatacon,xmppclient
|
|
next=streamdumper
|
|
|
|
[processor.streamdumper]
|
|
name=streamdumper
|
|
config.path=/opt/dionaea/var/dionaea/bistreams/%Y-%m-%d/
|
|
|
|
[processor.filter_emu]
|
|
name=filter
|
|
config.allow.0.protocols=smbd,epmapper,nfqmirrord,mssqld
|
|
next=emu
|
|
|
|
[processor.emu]
|
|
name=emu
|
|
config.limits.files=3
|
|
#512 * 1024
|
|
config.limits.filesize=524288
|
|
config.limits.sockets=3
|
|
config.limits.sustain=120
|
|
config.limits.idle=30
|
|
config.limits.listen=30
|
|
config.limits.cpu=120
|
|
#// 1024 * 1024 * 1024
|
|
config.limits.steps=1073741824
|
|
|
|
[module.nl]
|
|
# set to yes in case you are interested in the mac address of the remote (only works for lan)
|
|
lookup_ethernet_addr=yes
|
|
|
|
[module.python]
|
|
imports=dionaea.log,dionaea.services,dionaea.ihandlers
|
|
sys_paths=default
|
|
service_configs=/opt/dionaea/etc/dionaea/services/*.yaml
|
|
ihandler_configs=/opt/dionaea/etc/dionaea/ihandlers/*.yaml
|