How To Install dionaea on Fedora 34

dionaea is Low interaction honeypot

Introduction

In this tutorial we learn how to install dionaea on Fedora 34.

What is dionaea

Dionaea honeypot is meant to be a nepenthes successor, embedding python as scripting language, using libemu to detect shell-codes, supporting ipv6 and TLS.

We can use yum or dnf to install dionaea on Fedora 34. In this tutorial we discuss both methods but you only need to choose one of method to install dionaea.

Install dionaea on Fedora 34 Using dnf

Update yum database with dnf using the following command.

sudo dnf makecache --refresh

The output should look something like this:

Fedora 34 - x86_64                               20 kB/s | 6.6 kB     00:00
Fedora 34 openh264 (From Cisco) - x86_64        1.4 kB/s | 989  B     00:00
Fedora Modular 34 - x86_64                       68 kB/s | 6.5 kB     00:00
Fedora 34 - x86_64 - Updates                    3.5 kB/s | 6.2 kB     00:01
Fedora Modular 34 - x86_64 - Updates             17 kB/s | 5.9 kB     00:00
Metadata cache created.

After updating yum database, We can install dionaea using dnf by running the following command:

sudo dnf -y install dionaea

Install dionaea on Fedora 34 Using yum

Update yum database with yum using the following command.

sudo yum makecache --refresh

The output should look something like this:

Fedora 34 - x86_64                               20 kB/s | 6.6 kB     00:00
Fedora 34 openh264 (From Cisco) - x86_64        1.4 kB/s | 989  B     00:00
Fedora Modular 34 - x86_64                       68 kB/s | 6.5 kB     00:00
Fedora 34 - x86_64 - Updates                    3.5 kB/s | 6.2 kB     00:01
Fedora Modular 34 - x86_64 - Updates             17 kB/s | 5.9 kB     00:00
Metadata cache created.

After updating yum database, We can install dionaea using yum by running the following command:

sudo yum -y install dionaea

How To Uninstall dionaea on Fedora 34

To uninstall only the dionaea package we can use the following command:

sudo dnf remove dionaea

dionaea Package Contents on Fedora 34

/etc/dionaea
/etc/dionaea/dionaea.cfg
/etc/dionaea/ihandlers-available
/etc/dionaea/ihandlers-available/cmdshell.yaml
/etc/dionaea/ihandlers-available/emu_scripts.yaml
/etc/dionaea/ihandlers-available/emuprofile.yaml
/etc/dionaea/ihandlers-available/fail2ban.yaml
/etc/dionaea/ihandlers-available/ftp.yaml
/etc/dionaea/ihandlers-available/hpfeeds.yaml
/etc/dionaea/ihandlers-available/log_db_sql.yaml
/etc/dionaea/ihandlers-available/log_incident.yaml
/etc/dionaea/ihandlers-available/log_json.yaml
/etc/dionaea/ihandlers-available/log_sqlite.yaml
/etc/dionaea/ihandlers-available/nfq.yaml
/etc/dionaea/ihandlers-available/p0f.yaml
/etc/dionaea/ihandlers-available/store.yaml
/etc/dionaea/ihandlers-available/submit_http.yaml
/etc/dionaea/ihandlers-available/submit_http_post.yaml
/etc/dionaea/ihandlers-available/tftp_download.yaml
/etc/dionaea/ihandlers-available/virustotal.yaml
/etc/dionaea/ihandlers-enabled
/etc/dionaea/ihandlers-enabled/cmdshell.yaml
/etc/dionaea/ihandlers-enabled/emuprofile.yaml
/etc/dionaea/ihandlers-enabled/ftp.yaml
/etc/dionaea/ihandlers-enabled/log_sqlite.yaml
/etc/dionaea/ihandlers-enabled/store.yaml
/etc/dionaea/ihandlers-enabled/tftp_download.yaml
/etc/dionaea/services-available
/etc/dionaea/services-available/blackhole.yaml
/etc/dionaea/services-available/epmap.yaml
/etc/dionaea/services-available/ftp.yaml
/etc/dionaea/services-available/http.yaml
/etc/dionaea/services-available/memcache.yaml
/etc/dionaea/services-available/mirror.yaml
/etc/dionaea/services-available/mongo.yaml
/etc/dionaea/services-available/mqtt.yaml
/etc/dionaea/services-available/mssql.yaml
/etc/dionaea/services-available/mysql.yaml
/etc/dionaea/services-available/pptp.yaml
/etc/dionaea/services-available/sip.yaml
/etc/dionaea/services-available/smb.yaml
/etc/dionaea/services-available/tftp.yaml
/etc/dionaea/services-available/upnp.yaml
/etc/dionaea/services-enabled
/etc/dionaea/services-enabled/blackhole.yaml
/etc/dionaea/services-enabled/epmap.yaml
/etc/dionaea/services-enabled/ftp.yaml
/etc/dionaea/services-enabled/http.yaml
/etc/dionaea/services-enabled/memcache.yaml
/etc/dionaea/services-enabled/mirror.yaml
/etc/dionaea/services-enabled/mongo.yaml
/etc/dionaea/services-enabled/mqtt.yaml
/etc/dionaea/services-enabled/mssql.yaml
/etc/dionaea/services-enabled/mysql.yaml
/etc/dionaea/services-enabled/pptp.yaml
/etc/dionaea/services-enabled/sip.yaml
/etc/dionaea/services-enabled/smb.yaml
/etc/dionaea/services-enabled/tftp.yaml
/etc/dionaea/services-enabled/upnp.yaml
/etc/logrotate.d/dionaea
/etc/sysconfig/dionaea
/usr/bin/gnuplotsql
/usr/bin/readlogsqltree
/usr/lib/.build-id
/usr/lib/.build-id/01
/usr/lib/.build-id/01/806f8019727b3d60c22fb0eeccfeedca91a03e
/usr/lib/.build-id/18
/usr/lib/.build-id/18/7647feece04db5e8131684c3698286f48c1d6f
/usr/lib/.build-id/4a
/usr/lib/.build-id/4a/4b5b82f96aca2e584b62da0976dad603dad627
/usr/lib/.build-id/55
/usr/lib/.build-id/55/bd21c33d3b9583cf9ce7c0df9467241fa7167e
/usr/lib/.build-id/7a
/usr/lib/.build-id/7a/2768721be1fb1f54828298a99e8a8ca982a1c2
/usr/lib/.build-id/b6
/usr/lib/.build-id/b6/79413db0adab500adca6c1eac89b004d2d5ffd
/usr/lib/.build-id/c0
/usr/lib/.build-id/c0/efee8419fc2ab7a88abc39516f9561e2ebb392
/usr/lib/systemd/system/dionaea.service
/usr/lib64/dionaea
/usr/lib64/dionaea/curl.so
/usr/lib64/dionaea/emu.so
/usr/lib64/dionaea/nc.so
/usr/lib64/dionaea/nfq.so
/usr/lib64/dionaea/nl.so
/usr/lib64/dionaea/pcap.so
/usr/sbin/dionaea
/usr/share/doc/dionaea
/usr/share/doc/dionaea/README.md
/usr/share/licenses/dionaea
/usr/share/licenses/dionaea/LICENSE
/usr/share/man/man1/dionaea.1.gz
/var/lib/dionaea
/var/lib/dionaea/binaries
/var/lib/dionaea/bistreams
/var/lib/dionaea/dionaea.sqlite
/var/lib/dionaea/dionaea_incident.sqlite
/var/lib/dionaea/roots
/var/lib/dionaea/roots/ftp
/var/lib/dionaea/roots/tftp
/var/lib/dionaea/roots/upnp
/var/lib/dionaea/roots/www
/var/lib/dionaea/share
/var/lib/dionaea/share/python
/var/lib/dionaea/share/python/http
/var/lib/dionaea/share/python/http/template
/var/lib/dionaea/share/python/http/template/nginx
/var/lib/dionaea/share/python/http/template/nginx/autoindex.html.j2
/var/lib/dionaea/share/python/http/template/nginx/error.html.j2
/var/lib/dionaea/sipaccounts.sqlite
/var/log/dionaea
/etc/dionaea
/etc/dionaea/dionaea.cfg
/etc/dionaea/ihandlers-available
/etc/dionaea/ihandlers-available/cmdshell.yaml
/etc/dionaea/ihandlers-available/emu_scripts.yaml
/etc/dionaea/ihandlers-available/emuprofile.yaml
/etc/dionaea/ihandlers-available/fail2ban.yaml
/etc/dionaea/ihandlers-available/ftp.yaml
/etc/dionaea/ihandlers-available/hpfeeds.yaml
/etc/dionaea/ihandlers-available/log_db_sql.yaml
/etc/dionaea/ihandlers-available/log_incident.yaml
/etc/dionaea/ihandlers-available/log_json.yaml
/etc/dionaea/ihandlers-available/log_sqlite.yaml
/etc/dionaea/ihandlers-available/nfq.yaml
/etc/dionaea/ihandlers-available/p0f.yaml
/etc/dionaea/ihandlers-available/store.yaml
/etc/dionaea/ihandlers-available/submit_http.yaml
/etc/dionaea/ihandlers-available/submit_http_post.yaml
/etc/dionaea/ihandlers-available/tftp_download.yaml
/etc/dionaea/ihandlers-available/virustotal.yaml
/etc/dionaea/ihandlers-enabled
/etc/dionaea/ihandlers-enabled/cmdshell.yaml
/etc/dionaea/ihandlers-enabled/emuprofile.yaml
/etc/dionaea/ihandlers-enabled/ftp.yaml
/etc/dionaea/ihandlers-enabled/log_sqlite.yaml
/etc/dionaea/ihandlers-enabled/store.yaml
/etc/dionaea/ihandlers-enabled/tftp_download.yaml
/etc/dionaea/services-available
/etc/dionaea/services-available/blackhole.yaml
/etc/dionaea/services-available/epmap.yaml
/etc/dionaea/services-available/ftp.yaml
/etc/dionaea/services-available/http.yaml
/etc/dionaea/services-available/memcache.yaml
/etc/dionaea/services-available/mirror.yaml
/etc/dionaea/services-available/mongo.yaml
/etc/dionaea/services-available/mqtt.yaml
/etc/dionaea/services-available/mssql.yaml
/etc/dionaea/services-available/mysql.yaml
/etc/dionaea/services-available/pptp.yaml
/etc/dionaea/services-available/sip.yaml
/etc/dionaea/services-available/smb.yaml
/etc/dionaea/services-available/tftp.yaml
/etc/dionaea/services-available/upnp.yaml
/etc/dionaea/services-enabled
/etc/dionaea/services-enabled/blackhole.yaml
/etc/dionaea/services-enabled/epmap.yaml
/etc/dionaea/services-enabled/ftp.yaml
/etc/dionaea/services-enabled/http.yaml
/etc/dionaea/services-enabled/memcache.yaml
/etc/dionaea/services-enabled/mirror.yaml
/etc/dionaea/services-enabled/mongo.yaml
/etc/dionaea/services-enabled/mqtt.yaml
/etc/dionaea/services-enabled/mssql.yaml
/etc/dionaea/services-enabled/mysql.yaml
/etc/dionaea/services-enabled/pptp.yaml
/etc/dionaea/services-enabled/sip.yaml
/etc/dionaea/services-enabled/smb.yaml
/etc/dionaea/services-enabled/tftp.yaml
/etc/dionaea/services-enabled/upnp.yaml
/etc/logrotate.d/dionaea
/etc/sysconfig/dionaea
/usr/bin/gnuplotsql
/usr/bin/readlogsqltree
/usr/lib/.build-id
/usr/lib/.build-id/09
/usr/lib/.build-id/09/695e338fbe751c003df0643f0bd2b5b4808e47
/usr/lib/.build-id/24
/usr/lib/.build-id/24/6eb5af90567c226db897f7356e953fc40f1d11
/usr/lib/.build-id/36
/usr/lib/.build-id/36/7275108447ea5995b76c8fd18fb196ec045fd6
/usr/lib/.build-id/45
/usr/lib/.build-id/45/92ba9668f8a941efb24fef3486633f6f49ca74
/usr/lib/.build-id/62
/usr/lib/.build-id/62/9027cf5a22ad387424a2256871289ed17262af
/usr/lib/.build-id/97
/usr/lib/.build-id/97/cb08f7899a82c2741308a2b338e37e0254d8d0
/usr/lib/.build-id/a9
/usr/lib/.build-id/a9/3bd88bda207a5c67759c18540fbe762fdeda24
/usr/lib/systemd/system/dionaea.service
/usr/lib64/dionaea
/usr/lib64/dionaea/curl.so
/usr/lib64/dionaea/emu.so
/usr/lib64/dionaea/nc.so
/usr/lib64/dionaea/nfq.so
/usr/lib64/dionaea/nl.so
/usr/lib64/dionaea/pcap.so
/usr/sbin/dionaea
/usr/share/doc/dionaea
/usr/share/doc/dionaea/README.md
/usr/share/licenses/dionaea
/usr/share/licenses/dionaea/LICENSE
/usr/share/man/man1/dionaea.1.gz
/var/lib/dionaea
/var/lib/dionaea/binaries
/var/lib/dionaea/bistreams
/var/lib/dionaea/dionaea.sqlite
/var/lib/dionaea/dionaea_incident.sqlite
/var/lib/dionaea/roots
/var/lib/dionaea/roots/ftp
/var/lib/dionaea/roots/tftp
/var/lib/dionaea/roots/upnp
/var/lib/dionaea/roots/www
/var/lib/dionaea/share
/var/lib/dionaea/share/python
/var/lib/dionaea/share/python/http
/var/lib/dionaea/share/python/http/template
/var/lib/dionaea/share/python/http/template/nginx
/var/lib/dionaea/share/python/http/template/nginx/autoindex.html.j2
/var/lib/dionaea/share/python/http/template/nginx/error.html.j2
/var/lib/dionaea/sipaccounts.sqlite
/var/log/dionaea

References

Summary

In this tutorial we learn how to install dionaea on Fedora 34 using yum and dnf.