Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
If we do not hit our goal we will be forced to close the site.

Current status: https://keepboardsalive.com/

Annual subs are best for most impact. If you are still undecided on going Ad Free - you can also donate using the Paypal Donate option. All contribution helps. Thank you.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.

Dionaea honeypot

  • 22-05-2013 01:52PM
    #1
    Closed Accounts Posts: 18,966 ✭✭✭✭


    Anyone have any experience with installing and using Dionaea, the successor of Nepenthes. Having spent a couple of days getting the crypto libs working, I have something of a weird problem where it looks like it is haning while parsing the config file.

    I run it by doing:
    /opt/dionaea/bin/dionaea -c /opt/dionaea/etc/dionaea/dionaea.conf

    Dionaea Version 0.1.0
    Compiled on Linux/x86 at May 17 2013 18:37:19 with gcc 4.4.5 20101112 (Red Hat 4.4.5-2)
    Started on stormwind running Linux/i686 release 2.6.33.3-85.fc13.i686

    python
    sys_path
    0 = "default"
    imports
    0 = "log"
    1 = "services"
    2 = "ihandlers"
    ftp
    root = "var/dionaea/wwwroot"
    active-ports = "63001-64000"
    active-host = "0.0.0.0"
    <snip>

    <class 'dionaea.services.tftpservice'>
    <class 'dionaea.services.ftpservice'>
    <class 'dionaea.services.mirrorservice'>
    <class 'dionaea.services.smbservice'>
    <class 'dionaea.services.epmapservice'>
    <class 'dionaea.services.siptlsservice'>
    ......................+++
    ................................+++
    <class 'dionaea.services.sipudpservice'>
    <class 'dionaea.services.siptcpservice'>
    <class 'dionaea.services.mssqlservice'>
    <class 'dionaea.services.mysqlservice'>

    Then it does:
    <class 'dionaea.services.httpservice'>: [<dionaea.http.httpd object at 0x898f48c>]}}
    processors
    filter-emu
    config
    allow
    0
    protocol
    0 = "smbd"
    1 = "epmapper"
    2 = "nfqmirrord"
    3 = "mssqld"

    And then it concatenates the configfile and stays hung in a python shell. I made a typo in the config file once and I got a core dump and a full crash, so I don't know why Im getting dropped into a python shell now.

    Any suggestions?

    This is Fedora 13, i686.


Advertisement