Honeypot framework can be able to monitor realtime event based on container
- libpcap
- Docker
go build
./honeypot
./honeypot deploy -n <name of honeypot> -p <host_port:container_port> -i <name of image> -f <Dockerfile> -e <environment>
./honeypot monitor
./honeypot remove -n <name of honeypot>
./honeypot collect -i <interval:60m> -p <path of event storage>