Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/ikoniaris/kippo-graph

Visualize statistics from a Kippo SSH honeypot
https://github.com/ikoniaris/kippo-graph

Last synced: 2 months ago
JSON representation

Visualize statistics from a Kippo SSH honeypot

Awesome Lists containing this project

README

        

Kippo-Graph
===========

Kippo-Graph is a full featured script to visualize statistics for a Kippo based SSH honeypot.

It uses the Libchart PHP chart drawing library by Jean-Marc Trémeaux,
QGoogleVisualizationAPI PHP Wrapper for Google's Visualization API by Thomas Schäfer,
RedBeanPHP library by Gabor de Mooij, MaxMind and geoPlugin geolocation technology.

REQUIREMENTS:
-------------
1. PHP version 5.3.4 or higher.
2. The following packages: _libapache2-mod-php5_, _php5-mysql_, _php5-gd_, _php5-curl_.

On Ubuntu/Debian:
> apt-get update && apt-get install -y libapache2-mod-php5 php5-mysql php5-gd php5-curl
>
> /etc/init.d/apache2 restart

QUICK INSTALLATION:
-------------------
> wget http://bruteforce.gr/wp-content/uploads/kippo-graph-VERSION.tar.gz
>
> mv kippo-graph-VERSION.tar.gz /var/www/html
>
> cd /var/www/html
>
> tar zxvf kippo-graph-VERSION.tar.gz
>
> mv kippo-graph-VERSION kippo-graph
>
> cd kippo-graph
>
> chmod 777 generated-graphs
>
> cp config.php.dist config.php
>
> nano config.php #enter the appropriate values

Browse to http://your-server/kippo-graph to view or generate the honeypot charts and statistics.

Note 1: If you choose to disable `REALTIME_STATS` in your config.php file it is advisable to
setup a cron job to update the charts in the background. The recommended way to do that
is to add the following line in your crontab with `crontab -e` (make sure to change the
kippo-graph path if it's different):
> @hourly cd /var/www/html/kippo-graph && php kippo-graph.php > /dev/null 2>&1

Note 2: If you want to use the Kippo-Scanner component you will have to allow Kippo-Graph's .htaccess file
to take effect. You can do this by editing your Apache configuration file at /etc/apache2/apache2.conf
and changing `AllowOverride None` to `AllowOverride All` for the /var/www/ Directory (only).

Note 3: To fully use the geolocation features (Intensity Map) you will need to give CREATE
TEMPORARY TABLES rights to your MySQL database user (most likely it has already been done).