+-------------------------------------------+ | Warden Kippo connector 0.1 for Warden 3.X | +-------------------------------------------+ Content A. Introduction B. Dependencies C. Usage D. Configuration ------------------------------------------------------------------------------ A. Introduction Warden Kippo connector (executable warden3-kippo-sender.py) is a one-shot script to send events from Kippo honeypot toward the Warden server. ------------------------------------------------------------------------------ B. Dependencies 1. Platform Python 2.7+ 2. Python packages warden_client 3.0+ ------------------------------------------------------------------------------ C. Usage warden3-kippo-sender.py This script does not run as a daemon, for regularly run use job scheduler cron. ------------------------------------------------------------------------------ D. Configuration warden_client-kippo.cfg warden - path to warden-client config, e.g. 'warden/warden_client.cfg' name - sensor's source id used as a source of events, e.g. 'cz.cesnet.server.kippo' dbhost - hostname/IP of MySQL DB server dbuser - username dbpass - password dbname - database dbport - db port awin - aggregation window, e.g. 5 for events in the last 5 minutes cron SCRIPT_PATH=/opt/warden_client/ */5 * * * * root cd $SCRIPT_PATH; warden3-kippo-sender.py >> kippo-sender.log Note: Repeat interval must be the same as value of 'awin'. ------------------------------------------------------------------------------ Copyright (C) 2011-2015 Cesnet z.s.p.o
Forked from
713 / Warden / Warden
427 commits behind the upstream repository.
Name | Last commit | Last update |
---|---|---|
.. | ||
LICENSE | ||
README | ||
warden3-kippo-sender.py | ||
warden_client-kippo.cfg |