Dionaea vs Glutton

Dionaea is a free, self-hosted Linux honeypot designed to catch malware that exploits network services, with the aim of obtaining a copy. It embeds Python and uses libemu to detect shellcode. Dionaea can offer services over TCP, UDP, and TLS across IPv4 and IPv6. Listed protocols include FTP, HTTP, MQTT, MSSQL, MySQL, SIP, SMB, TFTP, and UPnP. Incident handlers can route selected information to JSON, SQLite, SQL, or hpfeeds; the documentation also describes sending JSON logs to the ELK stack for collection and visualization. Deployment options include an official Docker image and source code. Installation guidance recommends Ubuntu 18.04 LTS or Debian 10, with Python 3.9 or 3.8, and warns of libemu package availability issues for Ubuntu 20.04 and Debian 11. The project says Dionaea may contain exploitable bugs; it can drop privileges and use chroot to reduce possible impact. The repository lists GPLv2+, with separate licenses for the TFTP service and parts of FTP. Documentation points to GitHub issues, mailing-list, and IRC support channels.

Glutton has no write-up on Specifiction yet; its figures are above.