net/kippo 0.9_1 DragonFly

Medium interaction ssh honeypot

System: DragonFly
Repository: DPorts
Maintainer: [email protected] (as in FreeBSD)
License: BSD3CLAUSE
Categories: net
Package size: 383.1 KiB, 2789.8 KiB installed

Description

Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.

In the other systems

System

Port

Version

DragonFly

net/kippo

0.9_1

FreeBSD

net/kippo

0.9_1

HardenedBSD

net/kippo

0.9_1

GhostBSD

net/kippo

0.9_1

Install

Binary package:

pkg install kippo

From DPorts:

cd /usr/dports/net/kippo && make install clean

Dependencies

Run dependencies 4

No port depends on this one.

Configuration

No options to configure.

Service scripts: none

Message after installing

kippo has been installed in the following directory:

	/usr/local/share/kippo

Before starting kippo you need to perform the following steps:

1) Edit kippo's configuration file to suit your needs:

	$EDITOR /usr/local/share/kippo/kippo.cfg

   An example configuration file can be found here:
        /usr/local/share/kippo/kippo.cfg.dist

   Please keep in mind when editing the configuration file that kippo
   can't be run as root and is started by the 'kippo' unprivileged
   user instead. This implies that the following folders hierarchy
   must be created and made writable to the 'kippo' user:

	dl/
	data/
	log/tty/

2) Add the following line to your rc.conf:

	kippo_enable="YES"

   Note that you can also set the 'kippo_logfile' and 'kippo_pidfile'
   variables to specify the path to the log file and pid file that
   will be used by kippo. The default values for those variables are
   '/tmp/kippo.log' and '/tmp/kippo.pid' respectively.

Then you can start kippo by issuing the following command:

	service kippo start

===>   NOTICE:

The kippo port currently does not have a maintainer. As a result, it is
more likely to have unresolved issues, not be up-to-date, or even be removed in
the future. To volunteer to maintain this port, please create an issue at:

https://bugs.freebsd.org/bugzilla

More information about port maintainership is available at:

https://docs.freebsd.org/en/articles/contributing/#ports-contributing