DinoTools / dionaea

Home of the dionaea honeypot
https://dionaea.readthedocs.io/
GNU General Public License v2.0
696 stars 182 forks source link

MQTT is not publishing any fake message to topics #247

Open cryptax opened 5 years ago

cryptax commented 5 years ago

Hello,

I have installed Dionaea through T-pot. To test it, I have tried to send a MQTT request like mosquitto_sub -t '#' -h SERVERIP -p 1883 or subscribe to topic SYS/#. The honeypot did not answer anything at all :(

Though in the logs, I see my request got to the box:

{"src_ip": "XXXXXXXXX", "dst_port": 1883, "src_port": 49810, "connection": {"protocol": "mqttd", "transport": "tcp", "type": "accept"}, "dst_ip": "YYYYYYYYY", "src_hostname": "", "timestamp": "2019-01-18T10:11:50.045971"}

Why is that? I was expecting to read fake published messages on some topics...

AizazZaidee commented 5 years ago

No topics are being published by MQTT, I don't know how to publish them.

image

phibos commented 3 years ago

dionaea provides only very basic MQTT functionality. But I'm looking forward to implement topic publishing in the next release.

ghost commented 2 years ago

Hi, do you know a honeynet that implements advanced MQTT functionality?