Dionaea/Configuration

From aldeid
Jump to: navigation, search
You are here:
Configuration

Configuration

Setup appropriate permissions

$ sudo useradd dionaea
$ sudo groupadd dionaea
$ sudo usermod dionaea -G dionaea
$ sudo chown -R dionaea:dionaea /opt/dionaea/var/log/

Structure of the configuration file

Incomplete.png
INCOMPLETE SECTION OR ARTICLE
This section/article is being written and is therefore not complete.
Thank you for your comprehension.

Sections

logging

activate logrotate

As dionaea logs are quite verbose, it is recommended to activate logrotate.

$ cd /etc/logrotate.d/
$ cat > dionaea << EOF
/opt/dionaea/var/log/dionaea*.log {
       notifempty
       missingok
       rotate 28
       daily
       delaycompress
       compress
       create 660 root root
       dateext
       postrotate
               kill -HUP `cat /opt/dionaea/var/run/dionaea.pid`
       endscript
}
EOF

processors

filter-emu

Incomplete.png
INCOMPLETE SECTION OR ARTICLE
This section/article is being written and is therefore not complete.
Thank you for your comprehension.

filter-streamdumper

Incomplete.png
INCOMPLETE SECTION OR ARTICLE
This section/article is being written and is therefore not complete.
Thank you for your comprehension.

filter-sessions

Incomplete.png
INCOMPLETE SECTION OR ARTICLE
This section/article is being written and is therefore not complete.
Thank you for your comprehension.

downloads

Incomplete.png
INCOMPLETE SECTION OR ARTICLE
This section/article is being written and is therefore not complete.
Thank you for your comprehension.

bitstreams

Incomplete.png
INCOMPLETE SECTION OR ARTICLE
This section/article is being written and is therefore not complete.
Thank you for your comprehension.

submit

defaults

Incomplete.png
INCOMPLETE SECTION OR ARTICLE
This section/article is being written and is therefore not complete.
Thank you for your comprehension.

joebox

Incomplete.png
INCOMPLETE SECTION OR ARTICLE
This section/article is being written and is therefore not complete.
Thank you for your comprehension.

yoursection

Incomplete.png
INCOMPLETE SECTION OR ARTICLE
This section/article is being written and is therefore not complete.
Thank you for your comprehension.

listen

Incomplete.png
INCOMPLETE SECTION OR ARTICLE
This section/article is being written and is therefore not complete.
Thank you for your comprehension.

modules

  • curl
  • emu
  • pcap
  • nfq
  • python