dionaea | Some tweaking on dionaea honeypot

/opt/dionaea/bin/python3 setup.py build /opt/dionaea/bin/python3 setup.py install. udns does not use autotools to build. wget http://www.corpit.ru/mjt/udns/udns_0.0.9.tar.gz tar xfz udns_0.0.9.tar.gz cd udns-0.0.9/ ./configure make shared. There is no make install, so we copy the header to our include directory. and the lib to our library directory. cp .so /opt/dionaea/lib/ cd /opt/dionaea/lib ln -s libudns.so.0 libudns.so cd .. Grabbing curl from your distributions maintainer should work, if you run a decent distribution. If not go for the code. We will only cover a basic curl install, if you want fancy curl features, look at the curl compile docs. A fancy feature I can really recommend is compiling curl with c-ares, therefore this is the guide to install curl with c-ares. wget http://c-ares.haxx.se/c-ares-1.7.3.tar.gz tar xfz c-ares-1.7.3.tar.gz cd c-ares-1.7.3 ./configure --prefix=/opt/dionaea make make install. wget http://curl.haxx.se/download/curl-7.20.0.tar.bz2 tar xfj curl-7.20.0.tar.bz2 cd curl-7.20.0 ./configure --prefix=/opt/dionaea --enable-ares=/opt/dionaea make make install cd .. To honor the effort, we rely on libpcap 1.1.1. Most distros ship older versions, therefore it is likely you have to install it from source. wget http://www.tcpdump.org/release/libpcap-1.1.1.tar.gz tar xfz libpcap-1.1.1.tar.gz cd libpcap-1.1.1 ./configure --prefix=/opt/dionaea make make install cd .. WARNING: doing this, requires all dependencies to be compiled using the same ssl version, so you have to link curl and python to your own openssl build too If you experience problems with tls connections, install your OpenSSL >= 0.9.8l/1.0.0-beta2, or fall back to cvs for now. cvs -d anonymous@cvs.openssl.org:/openssl-cvs co openssl cd openssl ./Configure shared --prefix=/opt/dionaea linux-x86_64 make SHARED_LDFLAGS=-Wl,-rpath,/opt/dionaea/lib make install. git clone git://git.carnivore.it/dionaea.git dionaea. cd dionaea autoreconf -vi ./configure --with-lcfg-include=/opt/dionaea/include/ --with-lcfg-lib=/opt/dionaea/lib/ --with-python=/opt/dionaea/bin/python3.1 --with-cython-dir=/usr/local/bin --with-udns-include=/opt/dionaea/include/ --with-udns-lib=/opt/dionaea/lib/ --with-emu-include=/opt/dionaea/include/ --with-emu-lib=/opt/dionaea/lib/ --with-gc-include=/usr/include/gc --with-ev-include=/opt/dionaea/include --with-ev-lib=/opt/dionaea/lib --with-nl-include=/opt/dionaea/include --with-nl-lib=/opt/dionaea/lib/ --with-curl-config=/opt/dionaea/bin/ --with-pcap-include=/opt/dionaea/include --with-pcap-lib=/opt/dionaea/lib/ --with-glib=/opt/dionaea make make install. The software has some flags you can provide at startup, the -h flags shows the help, the -H includes the default values. -c, --config=FILE use FILE as configuration file Default value/behaviour: /opt/dionaea/etc/dionaea.conf -D, --daemonize run as daemon -g, --group=GROUP switch to GROUP after startup (use with -u) Default value/behaviour: keep current group -G, --garbage=[collect|debug] garbage collect, usefull to debug memory leaks, does NOT work with valgrind -h, --help display help -H, --large-help display help with default values -l, --log-levels=WHAT which levels to log, valid values all, debug, info, message, warning, critical, error combine using ',', exclude with - prefix -L, --log-domains=WHAT which domains use * and ? wildcards, combine using ',', exclude using - -u, --user=USER switch to USER after startup Default value/behaviour: keep current user -p, --pid-file=FILE write pid to file -r, --chroot=DIR chroot to DIR after startup Default value/behaviour: don't chroot -V, --version show version -w, --workingdir=DIR set the process' working dir to DIR Default value/behaviour: /opt/dionaea.