Visualize statistics from a Kippo SSH honeypot
Kippo-Graph is a full featured script to visualize statistics for a Kippo based SSH honeypot.
It uses the Libchart PHP chart drawing library by Jean-Marc Trémeaux, QGoogleVisualizationAPI PHP Wrapper for Google's Visualization API by Thomas Schäfer, RedBeanPHP library by Gabor de Mooij, MaxMind and geoPlugin geolocation technology.
apt-get update && apt-get install -y libapache2-mod-php5 php5-mysql php5-gd php5-curl
mv kippo-graph-VERSION.tar.gz /var/www/html
tar zxvf kippo-graph-VERSION.tar.gz
mv kippo-graph-VERSION kippo-graph
chmod 777 generated-graphs
cp config.php.dist config.php
nano config.php #enter the appropriate values
Browse to http://your-server/kippo-graph to view or generate the honeypot charts and statistics.
Note 1: If you choose to disable
REALTIME_STATSin your config.php file it is advisable to setup a cron job to update the charts in the background. The recommended way to do that is to add the following line in your crontab with
crontab -e(make sure to change the kippo-graph path if it's different):
@hourly cd /var/www/html/kippo-graph && php kippo-graph.php > /dev/null 2>&1
Note 2: If you want to use the Kippo-Scanner component you will have to allow Kippo-Graph's .htaccess file to take effect. You can do this by editing your Apache configuration file at /etc/apache2/apache2.conf and changing
AllowOverride Allfor the /var/www/ Directory (only).
Note 3: To fully use the geolocation features (Intensity Map) you will need to give CREATE TEMPORARY TABLES rights to your MySQL database user (most likely it has already been done).