cowrie - SSH honeypot

cowrie - SSH honeypot

Cowrie SSH honeypot can run on both Raspberry Pi 1 and Raspberry Pi 3. Raspberry Pi 3: This is well-supported and commonly used. Numerous tutorials, guides, and user reports confirm successful installations on Pi 3 models (e.g., 3B, 3B+), often with Raspberry Pi OS (formerly Raspbian). Examples include setups with DShield integration, Docker/Podman containers, and direct Python installations. The Pi 3's ARMv7 architecture and sufficient RAM/CPU make it straightforward. Raspberry Pi 1: It should also run, though it's less common due to the older hardware (ARMv6 architecture, 256–512 MB RAM, slower single-core CPU). Cowrie is a lightweight Python-based honeypot with low resource requirements—it emulates SSH in medium interaction mode without needing heavy computation. While most documented setups are on newer Pis (3/4/CM4), there are no inherent incompatibilities: Python and dependencies (like Twisted) support ARMv6, and older guides/issues reference similar low-power ARM boards. Performance may be slower under high attack volumes, but for basic honeypot use, it's feasible on Raspberry Pi OS (32-bit). Cowrie has no strict hardware requirements beyond a Linux environment with Python 3 support. Installation via git clone/virtualenv or Docker (with ARM images) works on both. For best results on Pi 1, use a lightweight OS setup and monitor resource usage.