telekom-security / tpotce

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Once again: Snare custom Pages

djoker77 opened this issue Β· comments

Successfully raise an issue

Before you post your issue make sure it has not been answered yet and provide ⚠️ BASIC SUPPORT INFORMATION (as requested below) if you come to the conclusion it is a new issue.

  • πŸ” Use the search function first
  • 🧐 Check our Wiki and the discussions
  • πŸ“š Consult the documentation of πŸ’» your Linux OS, 🐳 Docker, the 🦌 Elastic stack and the 🍯 T-Pot Readme.
  • βš™οΈ The Troubleshoot Section of the T-Pot Readme is a good starting point to collect a good set of information for the issue and / or to fix things on your own.
  • ⚠️ Provide BASIC SUPPORT INFORMATION or similar detailed information with regard to your issue or we will close the issue or convert it into a discussion without further interaction from the maintainers.

⚠️ Basic support information (commands are expected to run as root)

We happily take the time to improve T-Pot and take care of things, but we need you to take the time to create an issue that provides us with all the information we need.

  • What OS are you T-Pot running on?
    Debian 12

  • What is the version of the OS lsb_release -a and uname -a?

  • What T-Pot version are you currently using (only T-Pot 24.04.x is currently supported)?

  • What architecture are you running on (i.e. hardware, cloud, VM, etc.)?

  • Review the ~/install_tpot.log, attach the log and highlight the errors.

  • How long has your installation been running?

    • If it is a fresh install consult the documentation first.
    • Most likely it is a port conflict or a remote dependency was unavailable.
    • Retry a fresh installation and only open the issue if the error keeps coming up and is not resolved using the documentation as described here.
  • Did you install upgrades, packages or use the update script?

  • Did you modify any scripts or configs? If yes, please attach the changes.

  • Please provide a screenshot of htop and docker stats.

  • How much free disk space is available (df -h)?

  • What is the current container status (dps)?

  • On Linux: What is the status of the T-Pot service (systemctl status tpot)?

  • What ports are being occupied? Stop T-Pot systemctl stop tpot and run grc netstat -tulpen

    • Stop T-Pot systemctl stop tpot
    • Run grc netstat -tulpen
    • Run T-Pot manually with docker compose -f ~/tpotce/docker-compose.yml up and check for errors
    • Stop execution with CTRL-C and docker compose -f ~/tpotce/docker-compose.yml down -v
  • If a single container shows as DOWN you can run docker logs <container-name> for the latest log entries

Hi, I'm writing my bachelor thesis about webapplication Honeypots and tried you're product, its very impressive. I'm running T-Pot 24.04 on a Debian 12 VM and wanted to ask where do I have to store my custom cloned snare pages and which file do I have to adjust (in which path is the file stored?) so that i can run snare with a custom-cloned Page. I know it's been discussed a few times, but I couldn't find specific instructions for this process. Or maybe I'm too stupid :) I just need the path of the files I need to adjust. (PS: I have customized the docker-compose.yml file to exclude any honeypots except for snare/tanner, all other integrated tools were enabled)

Closing as duplicate of #1310