communityhoneynetwork / dionaea Goto Github PK
View Code? Open in Web Editor NEWDionaea installer using Ansible
Home Page: https://communityhoneynetwork.readthedocs.io
License: GNU Lesser General Public License v2.1
Dionaea installer using Ansible
Home Page: https://communityhoneynetwork.readthedocs.io
License: GNU Lesser General Public License v2.1
When we released personalities it was tested against version 0.7. After integration, Dionaea was upgraded to 0.8, which changed where file paths for various service options.
Currently, the example dionaea personality "debian" is broken.
Create a new sample personality for debian with correct paths which can be used as a starting point for other Dionaea custom personalities.
dionaea_1 | [10062019 20:22:55] python /code/modules/python/module.c:1061: __init__
dionaea_1 | [10062019 20:22:55] root (unknown file):0: There was an error in the Python service
dionaea_1 | Traceback (most recent call last):
dionaea_1 | File "binding.pyx", line 787, in dionaea.core.handle_io_in_cb
dionaea_1 | File "lib/dionaea/python/dionaea/sip/__init__.py", line 655, in handle_io_in
dionaea_1 | msg.set_personality(self.personality)
dionaea_1 | AttributeError: 'SipSession' object has no attribute 'personality'
This line:
https://github.com/CommunityHoneyNetwork/dionaea/blob/master/dionaea.run#L48
fails when the container has previously started. The workaround is to down
the containers, but ideally containers could be issued a stop
command and work properly on a subsequent start
.
Container does not start sip-tls
UPnP is enabled, but there are no processes listening on 1900 or 5000 for UPnP in the container.
Working with Dionaea container tagged 1.8, 8fe6108
Currently deployments are identifiable via the TLS cert Issuer contents.
It appears that when dionaea is run in a container, it will immediately spike to 100% of CPU usage. Using strace on the process reveals that some piece of code fails nearly continuously:
epoll_wait(5, [], 64, 0) = 0
recvfrom(0, 0x7ffddb3f8940, 2048, 0, NULL, NULL) = -1 ENOTSOCK (Socket operation on non-socket)
epoll_wait(5, [], 64, 0) = 0
recvfrom(0, 0x7ffddb3f8940, 2048, 0, NULL, NULL) = -1 ENOTSOCK (Socket operation on non-socket)
epoll_wait(5, [], 64, 0) = 0
recvfrom(0, ^C0x7ffddb3f8940, 2048, 0, NULL, NULL) = -1 ENOTSOCK (Socket operation on non-socket)
However, giving the container the NET_ADMIN capabilities in docker-compose.yml resolves the issue:
version: '2'
services:
dionaea:
image: stingar/dionaea:1.8-pre
volumes:
- ./dionaea.sysconfig:/etc/default/dionaea:z
- ./dionaea/dionaea:/etc/dionaea/:z
ports:
- "21:21"
- "23:23"
- "69:69"
- "80:80"
- "123:123"
- "135:135"
- "443:443"
- "445:445"
- "1433:1433"
- "1723:1723"
- "1883:1883"
- "1900:1900"
- "3306:3306"
- "5000:5000"
- "5060:5060"
- "5061:5061"
- "11211:11211"
- "27017:27017"
cap_add:
- NET_ADMIN
Ideally it would not be required to give this requirement, as this breaks security boundaries and would make running dionaea incompatible with K8s/OpenShift/etc.
There is no NTP service listening in the container, despite being enabled and started.
Working with Dionaea container tagged 1.8, 8fe6108
New code here:
Hi,
When updating FEEDS_SERVER_PORT in dionaea/dionaea.sysconfig to a different port number, Dionaea will continue to use the default port 10000.
I was able to change ports after adding the following to /etc/runit/runsvdir/default/dionaea/run:
sed -i "s/port:.*/port: ${FEEDS_SERVER_PORT}/g" /opt/dionaea/etc/dionaea/ihandlers-available/hpfeeds.yaml
Thanks!
When using tags that include a colon, dionaea tries to interpret the tags as valid YAML and fails in unexpected ways.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.