Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to support multiple services? #448

Open
tonghuaroot opened this issue Nov 14, 2018 · 3 comments
Open

How to support multiple services? #448

tonghuaroot opened this issue Nov 14, 2018 · 3 comments

Comments

@tonghuaroot
Copy link

I tried two configurations, but none of them succeeded.
1.

[listener]
type="agent"

[[port]]
port="tcp/23"
services=["ssh-simulator"]

[[port]]
port="tcp/6379"
services=["redis"]

[service.ssh-simulator]
type="ssh-simulator"
credentials=["root:root", "root:password"]

[service.redis]
type="redis"
port="tcp/6379"
version="4.0.6"
os="Linux 4.9.49-moby x86_64"

[service.ftp]
type="ftp"
port="tcp/21"
banner="Welcome to the THU FTP server"
servername="ftp01.thu.io"
files="test.txt"

[channel.elasticsearch]
type="elasticsearch"
url="http://elasticsearch:9200/honeytrap"

[[filter]]
channel=["console", "elasticsearch"]

[[logging]]
output="stdout"
level="debug"
[listener]
type="agent"

[[port]]
port="tcp/23,tcp/6379"
services=["ssh-simulator", ""redis""]

[service.ssh-simulator]
type="ssh-simulator"
credentials=["root:root", "root:password"]

[service.redis]
type="redis"
port="tcp/6379"
version="4.0.6"
os="Linux 4.9.49-moby x86_64"

[service.ftp]
type="ftp"
port="tcp/21"
banner="Welcome to the THU FTP server"
servername="ftp01.thu.io"
files="test.txt"

[channel.elasticsearch]
type="elasticsearch"
url="http://elasticsearch:9200/honeytrap"

[[filter]]
channel=["console", "elasticsearch"]

[[logging]]
output="stdout"
level="debug"
@nl5887
Copy link
Contributor

nl5887 commented Nov 14, 2018

Do you get any errors? Could you add the console output?

@nl5887
Copy link
Contributor

nl5887 commented Nov 19, 2018

@omg2hei do you have any logging?

@namhikelo
Copy link

@nl5887 I'm trying to configure a connect agent, but I'm unsure about the purpose of the "config.sample.yaml" file. Could you please explain what this file is used for?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants