Rsync Honeypot Enterprise Community
The Rsync service emulates a file synchronization server and logs connection attempts.
Configuration
json
"rsync": [
{
"port": 873,
"version": "31.0",
"modules": ["Backup", "Users"]
}
]Parameters
| Parameter | Type | Default | Description |
|---|---|---|---|
port | integer | 873 | TCP port |
version | string | 31.0 | Protocol version in the @RSYNCD: greeting (31.0 or 30.0) |
modules | array | ["Backup", "Users"] | Module names advertised in the module list and accepted for auth |
What gets captured
| Event | Fields |
|---|---|
| Connection made | Source IP and port |
| Data sent | Raw client data |
| Query received | Module name requested (including empty module-list request) |
| Login attempt | Username and challenge response |