Dionaea
5.8#11 in honeypot softwareFree planFree planLinuxSelf-hosted
VisitDionaea vs OpenCanary
OpenCanary
6.5#2 in honeypot softwareFree planFree planLinuxmacOSSelf-hosted
VisitWhat both publish
| Fact | Dionaea | OpenCanary |
|---|---|---|
| Deployment | The project provides an official Docker image and source code downloads from its release page or Git repository. | The project documents installation on Ubuntu and macOS, plus Docker deployment on Linux hosts using host networking. |
| License | The repository lists Dionaea as GPLv2+, with a TFTP service under the CNRI Python License and parts of FTP under MIT. | The PyPI listing identifies OpenCanary as OSI Approved BSD licensed software. |
| Protocols | Listed services include FTP, HTTP, MQTT, MSSQL, MySQL, SIP, SMB, TFTP, and UPnP. | Native service modules include SSH, FTP, Git, HTTP, HTTPS, HTTP proxy, MSSQL, MySQL, Telnet, SNMP, SIP, VNC, Redis, TFTP, NTP, and TCP banner. |
| Purpose | Dionaea is a honeypot intended to trap malware exploiting network services, with the goal of obtaining a copy of the malware. | OpenCanary is a multi-protocol network honeypot intended to detect attackers interacting with services on non-public networks. |
| Support | The documentation directs users to the GitHub issue tracker for problems and also mentions mailing-list and IRC support channels. | Bug reports are requested through GitHub, security vulnerabilities through the project security policy, and feature requests through the project tracker. |
Dionaea plans
- DionaeaFree
OpenCanary plans
- OpenCanaryFree
Pick Dionaea if…
Dionaea suits security practitioners who want to deploy a self-hosted network honeypot and route incident details into logging or analysis formats. It is intended for users able to work with Linux deployment guidance.
Pick OpenCanary if…
It suits administrators who want a self-hosted decoy for detecting interactions with network services. Linux provides the widest module options; macOS lacks SMB monitoring, and portscan monitoring is limited to Linux and disabled in Docker.