Welcome to Cowrie’s documentation!

Contents:

• Cowrie
  • Welcome to the Cowrie GitHub repository
  • What is Cowrie
  • Documentation
  • Slack
  • Features
  • Docker
  • Requirements
  • Files of interest:
  • Data Sharing
  • Contributors
• Frequently asked questions
  • Why can’t I start cowrie on port 22?
  • Why do I get logged into my own system when accessing cowrie on port 22?
  • What I am getting permission denied when running cowrie on port 22?
  • Do I need to copy all the content of cowrie.cfg.dist to cowrie.cfg?
  • Why certain commands aren’t implemented?
• LICENSE
• Installing Cowrie in seven steps.
  • Step 1: Install dependencies
  • Step 2: Create a user account
  • Step 3: Checkout the code
  • Step 4: Setup Virtual Environment
  • Step 5: Install configuration file
  • Step 6: Starting Cowrie
  • Step 7: Listening on port 22 (OPTIONAL)
  • Installing Backend Pool dependencies (OPTIONAL)
  • Running using Supervisord (OPTIONAL)
  • Configure Additional Output Plugins (OPTIONAL)
• Troubleshooting
• Updating Cowrie
• Modifying Cowrie
• Release 2.0.0
• Release 1.6.0
• Release 1.5.3
• Release 1.5.2
• Release 1.5.1
• Contributing Guidelines
• Reporting Bugs/Feature Requests
• Contributing via Pull Requests
• Finding contributions to work on
• Licensing
• Using the Proxy
  • Choosing a Backend
  • Configuring the Proxy
• Backend Pool
  • Provided images
  • Backend Pool initialisation
  • Proxy configurations
  • Backend Pool configuration
  • Creating VM images
  • References
• Analysing snapshots and downloaded content
  • Getting the a filesystem diff
  • Getting interesting files
• How to process Cowrie output in an ELK stack
  • Prerequisites
  • Installation
  • ElasticSearch Configuration
  • Kibana Configuration
  • Logstash Configuration
  • Distributed setup of sensors or multiple sensors on the same host
  • Tuning ELK stack
• How to process Cowrie output into Graylog
  • Prerequisites
  • Cowrie Configuration
  • Graylog Configuration
  • Syslog Configuration
• How to process Cowrie output in kippo-graph
  • Prerequisites
  • Installation
  • MySQL configuration
  • Cowrie configuration
  • kippo-graph Configuration
  • Apache2 configuration (optional)
• How to process Cowrie output with Splunk
  • Splunk Output Module
  • File Based
  • Reporting
• How to Send Cowrie Output to a MySQL Database
  • Prerequisites
  • Installation
  • MySQL Configuration
  • Cowrie Configuration
• Using TCP tunneling with Squid
  • Prerequisites
  • Installation
  • Squid Configuration
  • Cowrie Configuration
• Automatically starting Cowrie with supervisord
• Automatically starting Cowrie with systemd

Indices and tables

• Index
• Module Index
• Search Page