Can't to run ./cowrie start,

[endra.r...@protergo.id]

Sory if my english is bad, i try to install cowrie from mhn deployment script for ubuntu. After finish installation. I'm try to run ./cowrie start, but it appers an errors.

(cowrie-env)cowrie@MHNClient:/opt/cowrie/bin$ ./cowrie start

Using activated Python virtual environment "/opt/cowrie/cowrie-env"

Starting cowrie: [twistd -n  --umask 0022 --pidfile var/run/cowrie.pid --logger cowrie.python.logfile.logger cowrie ]...

Traceback (most recent call last):

  File "/opt/cowrie/cowrie-env/bin/twistd", line 9, in <module>

    load_entry_point('Twisted==18.4.0', 'console_scripts', 'twistd')()

  File "/opt/cowrie/cowrie-env/local/lib/python2.7/site-packages/twisted/scripts/twistd.py", line 31, in run

    app.run(runApp, ServerOptions)

  File "/opt/cowrie/cowrie-env/local/lib/python2.7/site-packages/twisted/application/app.py", line 674, in run

    runApp(config)

  File "/opt/cowrie/cowrie-env/local/lib/python2.7/site-packages/twisted/scripts/twistd.py", line 25, in runApp

    runner.run()

  File "/opt/cowrie/cowrie-env/local/lib/python2.7/site-packages/twisted/application/app.py", line 381, in run

    self.application = self.createOrGetApplication()

  File "/opt/cowrie/cowrie-env/local/lib/python2.7/site-packages/twisted/application/app.py", line 448, in createOrGetApplication

    ser = plg.makeService(self.config.subOptions)

  File "/opt/cowrie/twisted/plugins/cowrie_plugin.py", line 159, in makeService

    if CONFIG.getboolean(x, 'enabled') is False:

  File "/opt/cowrie/cowrie-env/local/lib/python2.7/site-packages/backports/configparser/__init__.py", line 849, in getboolean

    **kwargs)

  File "/opt/cowrie/cowrie-env/local/lib/python2.7/site-packages/backports/configparser/__init__.py", line 822, in _get_conv

    return self._get(section, conv, option, **kwargs)

  File "/opt/cowrie/cowrie-env/local/lib/python2.7/site-packages/backports/configparser/__init__.py", line 814, in _get

    return conv(self.get(section, option, **kwargs))

  File "/opt/cowrie/cowrie-env/local/lib/python2.7/site-packages/backports/configparser/__init__.py", line 803, in get

    raise NoOptionError(option, section)

backports.configparser.NoOptionError: No option 'enabled' in section: u'output_hpfeeds'

Can somebody help me pliss.

thanks

[Brady Sullivan]

If you use the deployment script you should not have to run the start command. Run ‘sudo supervisorctl status’ to see if it’s already running. 

Brady Sullivan

--
You received this message because you are subscribed to the Google Groups "Modern Honey Network" group.
To unsubscribe from this group and stop receiving emails from it, send an email to modern-honey-net...@googlegroups.com.
To post to this group, send email to modern-hon...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/modern-honey-network/a3441cac-a9c9-4189-ab10-e5d8fd83b848%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Drewee Drewee]

If it doesn´t work try to restart all services 

#sudo supervisorctl restart all

regards....

[Drewee Drewee]

Hello,

Continuing with the query that you have done to me by mail

Similar to the honeypot, you have to check in the MHN Server if the services are running properly with the command

#  sudo supervisorctl status

and the command

# sudo supervisorctl restart all

to restart them.

Make sure that the geoloc service is running on MHN Server.

Remember that the honeymap is on port 3000 (Server MHN) and must be configured in the file (/opt/mhn/server/config.py)

Greetings.

Drew

[Drewee Drewee]

Endra,

Are you sure that the Honeypot have connection to the MHN Server by the hpfeeds port (10000) ??

Assure Logs are reaching to your MHN Server, that port feeds the datacollector before show on honeymap

Check all logs to assure the config is correct.

Remember too that cowrie in only a ssh honeypot....

It is better to test first ssh connections to the specific port and see if they take effect

regards

Drew.

[endra.r...@protergo.id]

Okey thanks drew, sory for late respon.

cowrie success install and running and i'm trying to nc from cowrie sensor to mhn server. the result is like this.

can you help me fix it, because when i'm trying to attack cowrie. Nothing event detech from mhn page server.

thanks

[Drewee Drewee]

Endra, 

Could you put the queries on the MHN Google Blog to share solutions ???

Because some other people maybe has the same problem and they can use these information to fix their problems too.

Cowrie create a virtual enviroment listening on port 22. If you want to attack your cowrie honeypot you need to connect to 22 port of your Cowrie(PC) Honeypot.

 If it is correctly configured, When cowrie service detects an attack, automatically it is reported to your MHN Server on it 10000 port.

Regards

Drew.

[max.e...@gmail.com]

I have the same problem.

What can I do?

This is what i get:

cowrie@honeypot:/opt/cowrie/bin$ ./cowrie start

Join the Cowrie community at: http://bit.ly/cowrieslack

Using default Python virtual environment "/opt/cowrie/cowrie-env"

Starting cowrie: [twistd -n  --umask 0022 --pidfile var/run/cowrie.pid --logger cowrie.python.logfile.logger cowrie ]...

Traceback (most recent call last):

  File "/opt/cowrie/cowrie-env/bin/twistd", line 11, in <module>

    sys.exit(run())

  File "/opt/cowrie/cowrie-env/local/lib/python2.7/site-packages/twisted/scripts/twistd.py", line 31, in run

    app.run(runApp, ServerOptions)

  File "/opt/cowrie/cowrie-env/local/lib/python2.7/site-packages/twisted/application/app.py", line 674, in run

    runApp(config)

  File "/opt/cowrie/cowrie-env/local/lib/python2.7/site-packages/twisted/scripts/twistd.py", line 25, in runApp

    runner.run()

  File "/opt/cowrie/cowrie-env/local/lib/python2.7/site-packages/twisted/application/app.py", line 381, in run

    self.application = self.createOrGetApplication()

  File "/opt/cowrie/cowrie-env/local/lib/python2.7/site-packages/twisted/application/app.py", line 448, in createOrGetApplication

    ser = plg.makeService(self.config.subOptions)

  File "/opt/cowrie/src/twisted/plugins/cowrie_plugin.py", line 162, in makeService

    if CONFIG.getboolean(x, 'enabled') is False:

  File "/opt/cowrie/cowrie-env/local/lib/python2.7/site-packages/backports/configparser/__init__.py", line 849, in getboolean

    **kwargs)

  File "/opt/cowrie/cowrie-env/local/lib/python2.7/site-packages/backports/configparser/__init__.py", line 822, in _get_conv

    return self._get(section, conv, option, **kwargs)

  File "/opt/cowrie/cowrie-env/local/lib/python2.7/site-packages/backports/configparser/__init__.py", line 814, in _get

    return conv(self.get(section, option, **kwargs))

  File "/opt/cowrie/src/cowrie/core/config.py", line 30, in get

    return super(EnvironmentConfigParser, self).get(section, option, **kwargs)

  File "/opt/cowrie/cowrie-env/local/lib/python2.7/site-packages/backports/configparser/__init__.py", line 803, in get

    raise NoOptionError(option, section)

backports.configparser.NoOptionError: No option 'enabled' in section: u'output_hpfeeds'

cowrie@honeypot:/opt/cowrie/bin$

root@honeypot:/# supervisorctl status

cowrie                           FATAL      Exited too quickly (process log may have details)

geoloc                           RUNNING    pid 31011, uptime 0:08:47

honeymap                         RUNNING    pid 31000, uptime 0:08:48

hpfeeds-broker                   RUNNING    pid 31053, uptime 0:08:44

hpfeeds-logger-json              RUNNING    pid 31015, uptime 0:08:46

kibana                           RUNNING    pid 30992, uptime 0:08:49

logstash                         RUNNING    pid 30950, uptime 0:08:49

mhn-celery-beat                  RUNNING    pid 30951, uptime 0:08:49

mhn-celery-worker                RUNNING    pid 31023, uptime 0:08:45

mhn-collector                    RUNNING    pid 31041, uptime 0:08:44

mhn-uwsgi                        RUNNING    pid 31018, uptime 0:08:45

mnemosyne                        RUNNING    pid 31006, uptime 0:08:47

root@honeypot:/# supervisorctl restart all

logstash: stopped

hpfeeds-logger-json: stopped

mhn-uwsgi: stopped

mhn-celery-worker: stopped

mhn-collector: stopped

hpfeeds-broker: stopped

mhn-celery-beat: stopped

kibana: stopped

honeymap: stopped

mnemosyne: stopped

geoloc: stopped

hpfeeds-logger-json: started

cowrie: ERROR (abnormal termination)

logstash: started

mhn-celery-beat: started

kibana: started

honeymap: started

mnemosyne: started

geoloc: started

mhn-uwsgi: started

mhn-celery-worker: started

mhn-collector: started

hpfeeds-broker: started

[max.e...@gmail.com]

up