Skip to content

I cannot access the webUI and the kibana dashboards #1837

Closed
Closed
I cannot access the webUI and the kibana dashboards#1837
Labels
cannot reproduce
@alysaamni

Description

@alysaamni
alysaamni
opened on Sep 4, 2025

Issue: I installed tpot in my vmware using NAT because i just wanted to do attack simulation. at first, everything is fine. i can access the tpot webUI and can open attack map etc but ofcourse no incoming attacks as i didnt expose it to the Internet. However, even then, I can't open Kibana. I clicked the Kibana from the start page but it shows this everytime. sometimes i do troubleshooting and then the webUI itself shows the same error. why? help me fix this :( this is for my uni project.

Image

⚠️ Basic support information (commands are expected to run as root)

  • What OS are you T-Pot running on? Debian 12
  • What is the version of the OS lsb_release -a and uname -a?
    Linux debian 6.1.0-38-amd64 Release needs testing in VM and on a NUC #1 SMP PREEMPT_DYNAMIC Debian 6.1.147-1 (2025-08-02) x86_64 GNU/Linux
  • What T-Pot version are you currently using (only T-Pot 24.04.x is currently supported)? T-Pot 24.04.1
  • What architecture are you running on (i.e. hardware, cloud, VM, etc.)? VMware
  • Review the ~/install_tpot.log, attach the log and highlight the errors.
  • How long has your installation been running? ** A week**
    • If it is a fresh install consult the documentation first.
    • Most likely it is a port conflict or a remote dependency was unavailable.
    • Retry a fresh installation and only open the issue if the error keeps coming up and is not resolved using the documentation as described here.
  • Did you install upgrades, packages or use the update script? Yes
  • Did you modify any scripts or configs? If yes, please attach the changes. No
  • Please provide a screenshot of htop and docker stats.
Image
  • How much free disk space is available (df -h)?

honeypot@debian:~$ df -h
Filesystem Size Used Avail Use% Mounted on
udev 3.9G 0 3.9G 0% /dev
tmpfs 791M 4.2M 787M 1% /run
/dev/sda1 31G 15G 15G 51% /
tmpfs 3.9G 0 3.9G 0% /dev/shm
tmpfs 5.0M 8.0K 5.0M 1% /run/lock
tmpfs 791M 100K 791M 1% /run/user/1001

  • What is the current container status (dps)?
Image
  • On Linux: What is the status of the T-Pot service (systemctl status tpot)?
  • What ports are being occupied? Stop T-Pot systemctl stop tpot and run grc netstat -tulpen
    • Stop T-Pot systemctl stop tpot
    • Run grc netstat -tulpen

(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State User Inode PID/Program name
tcp 0 0 0.0.0.0:1025 0.0.0.0:* LISTEN 0 517632 -
tcp 0 0 0.0.0.0:1080 0.0.0.0:* LISTEN 0 516983 -
tcp 0 0 0.0.0.0:5432 0.0.0.0:* LISTEN 0 517002 -
tcp 0 0 127.0.0.1:64303 0.0.0.0:* LISTEN 0 514305 -
tcp 0 0 127.0.0.1:64298 0.0.0.0:* LISTEN 0 516585 -
tcp 0 0 127.0.0.1:64299 0.0.0.0:* LISTEN 0 514347 -
tcp 0 0 0.0.0.0:1433 0.0.0.0:* LISTEN 0 519571 -
tcp 0 0 0.0.0.0:5555 0.0.0.0:* LISTEN 0 518332 -
tcp 0 0 0.0.0.0:1723 0.0.0.0:* LISTEN 0 518563 -
tcp 0 0 0.0.0.0:1883 0.0.0.0:* LISTEN 0 518583 -
tcp 0 0 0.0.0.0:5900 0.0.0.0:* LISTEN 0 517912 -
tcp 0 0 0.0.0.0:10001 0.0.0.0:* LISTEN 0 515219 -
tcp 0 0 0.0.0.0:81 0.0.0.0:* LISTEN 0 519477 -
tcp 0 0 0.0.0.0:104 0.0.0.0:* LISTEN 0 520202 -
tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN 0 516840 -
tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 0 516274 -
tcp 0 0 0.0.0.0:20 0.0.0.0:* LISTEN 0 519342 -
tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 0 519378 -
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 0 515751 -
tcp 0 0 0.0.0.0:23 0.0.0.0:* LISTEN 0 514780 -
tcp 0 0 0.0.0.0:42 0.0.0.0:* LISTEN 0 519405 -
tcp 0 0 0.0.0.0:8443 0.0.0.0:* LISTEN 0 513906 -
tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN 0 516894 -
tcp 0 0 0.0.0.0:135 0.0.0.0:* LISTEN 0 519495 -
tcp 0 0 0.0.0.0:465 0.0.0.0:* LISTEN 0 516910 -
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 0 516622 -
tcp 0 0 0.0.0.0:445 0.0.0.0:* LISTEN 0 519530 -
tcp 0 0 0.0.0.0:587 0.0.0.0:* LISTEN 0 516444 -
tcp 0 0 0.0.0.0:5060 0.0.0.0:* LISTEN 0 519147 -
tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN 0 516927 -
tcp 0 0 0.0.0.0:995 0.0.0.0:* LISTEN 0 516946 -
tcp 0 0 0.0.0.0:9200 0.0.0.0:* LISTEN 0 510519 -
tcp 0 0 0.0.0.0:9100 0.0.0.0:* LISTEN 0 518166 -
tcp 0 0 0.0.0.0:50100 0.0.0.0:* LISTEN 0 516735 -
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 0 519628 -
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 0 469543 -
tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN 0 517517 -
tcp 0 0 0.0.0.0:6379 0.0.0.0:* LISTEN 0 516520 -
tcp 0 0 0.0.0.0:2404 0.0.0.0:* LISTEN 0 509886 -
tcp 0 0 0.0.0.0:27017 0.0.0.0:* LISTEN 0 518635 -
tcp 0 0 0.0.0.0:2575 0.0.0.0:* LISTEN 0 517560 -
tcp 0 0 0.0.0.0:11112 0.0.0.0:* LISTEN 0 519049 -
tcp 0 0 0.0.0.0:64297 0.0.0.0:* LISTEN 0 514183 -
tcp 0 0 0.0.0.0:64294 0.0.0.0:* LISTEN 0 514148 -
tcp 0 0 0.0.0.0:64295 0.0.0.0:* LISTEN 0 23747 -
tcp 0 0 0.0.0.0:3000 0.0.0.0:* LISTEN 0 519197 -
tcp6 0 0 :::1025 :::* LISTEN 0 517633 -
tcp6 0 0 :::1080 :::* LISTEN 0 516984 -
tcp6 0 0 :::5432 :::* LISTEN 0 517003 -
tcp6 0 0 :::1433 :::* LISTEN 0 519572 -
tcp6 0 0 :::5555 :::* LISTEN 0 518333 -
tcp6 0 0 :::1723 :::* LISTEN 0 518564 -
tcp6 0 0 :::1883 :::* LISTEN 0 518584 -
tcp6 0 0 :::5900 :::* LISTEN 0 517913 -
tcp6 0 0 :::10001 :::* LISTEN 0 515220 -
tcp6 0 0 :::81 :::* LISTEN 0 519478 -
tcp6 0 0 :::104 :::* LISTEN 0 520203 -
tcp6 0 0 :::110 :::* LISTEN 0 516841 -
tcp6 0 0 :::25 :::* LISTEN 0 516275 -
tcp6 0 0 :::20 :::* LISTEN 0 519343 -
tcp6 0 0 :::21 :::* LISTEN 0 519379 -
tcp6 0 0 :::22 :::* LISTEN 0 515752 -
tcp6 0 0 :::23 :::* LISTEN 0 514781 -
tcp6 0 0 :::42 :::* LISTEN 0 519406 -
tcp6 0 0 :::8443 :::* LISTEN 0 513907 -
tcp6 0 0 :::143 :::* LISTEN 0 516895 -
tcp6 0 0 :::135 :::* LISTEN 0 519496 -
tcp6 0 0 :::465 :::* LISTEN 0 516911 -
tcp6 0 0 :::443 :::* LISTEN 0 516623 -
tcp6 0 0 :::445 :::* LISTEN 0 519531 -
tcp6 0 0 :::587 :::* LISTEN 0 516445 -
tcp6 0 0 :::5060 :::* LISTEN 0 519148 -
tcp6 0 0 :::993 :::* LISTEN 0 516928 -
tcp6 0 0 :::995 :::* LISTEN 0 516947 -
tcp6 0 0 :::9200 :::* LISTEN 0 510520 -
tcp6 0 0 :::9100 :::* LISTEN 0 518167 -
tcp6 0 0 :::50100 :::* LISTEN 0 516736 -
tcp6 0 0 ::1:631 :::* LISTEN 0 469542 -
tcp6 0 0 :::3306 :::* LISTEN 0 519629 -
tcp6 0 0 :::8080 :::* LISTEN 0 517518 -
tcp6 0 0 :::6379 :::* LISTEN 0 516521 -
tcp6 0 0 :::2404 :::* LISTEN 0 509887 -
tcp6 0 0 :::27017 :::* LISTEN 0 518636 -
tcp6 0 0 :::2575 :::* LISTEN 0 517561 -
tcp6 0 0 :::11112 :::* LISTEN 0 519050 -
tcp6 0 0 :::64297 :::* LISTEN 0 514184 -
tcp6 0 0 :::64294 :::* LISTEN 0 514149 -
tcp6 0 0 :::64295 :::* LISTEN 0 23749 -
tcp6 0 0 :::3000 :::* LISTEN 0 519198 -
udp 0 0 0.0.0.0:5353 0.0.0.0:* 104 21810 -
udp 0 0 0.0.0.0:54656 0.0.0.0:* 104 21812 -
udp 0 0 0.0.0.0:69 0.0.0.0:* 0 519441 -
udp 0 0 0.0.0.0:161 0.0.0.0:* 0 509846 -
udp 0 0 0.0.0.0:623 0.0.0.0:* 0 519298 -
udp 0 0 0.0.0.0:5000 0.0.0.0:* 0 513677 -
udp 0 0 0.0.0.0:5060 0.0.0.0:* 0 520326 -
udp6 0 0 :::5353 :::* 104 21811 -
udp6 0 0 :::60291 :::* 104 21813 -
udp6 0 0 :::69 :::* 0 519442 -
udp6 0 0 :::161 :::* 0 509847 -
udp6 0 0 :::623 :::* 0 519299 -
udp6 0 0 :::5000 :::* 0 513678 -
udp6 0 0 :::5060 :::* 0 520327 -

  • Run T-Pot manually with docker compose -f ~/tpotce/docker-compose.yml up and check for errors

Attaching to adbhoney, ciscoasa, conpot_guardian_ast, conpot_iec104, conpot_ipmi, conpot_kamstrup_382, cowrie, dicompot, dionaea, elasticpot, elasticsearch, ewsposter, fatt, h0neytr4p, heralding, honeyaml, honeytrap, ipphoney, kibana, logstash, mailoney, map_data, map_redis, map_web, medpot, miniprint, nginx, p0f, redishoneypot, sentrypeer, snare, spiderfoot, suricata, tanner, tanner_api, tanner_phpox, tanner_redis, tpotinit, wordpot
dionaea exited with code 255
sentrypeer exited with code 137
sentrypeer exited with code 137
dionaea exited with code 255
sentrypeer exited with code 137
dionaea exited with code 255
dionaea exited with code 255
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x48 pc=0x20e6092]
w Enable Watch
goroutine 382 [running]:
github.com/docker/compose/v2/pkg/compose.(*monitor).Start(0xc0006c23c0, {0x2d2ffd0, 0x4387460})
github.com/docker/compose/v2/pkg/compose/monitor.go:153 +0xbf2
github.com/docker/compose/v2/pkg/compose.(*composeService).Up.func6()
github.com/docker/compose/v2/pkg/compose/up.go:234 +0x2e
github.com/hashicorp/go-multierror.(*Group).Go.func1()
github.com/hashicorp/go-multierror@v1.1.1/group.go:23 +0x59
created by github.com/hashicorp/go-multierror.(*Group).Go in goroutine 1
github.com/hashicorp/go-multierror@v1.1.1/group.go:20 +0x76

  • Stop execution with CTRL-C and docker compose -f ~/tpotce/docker-compose.yml down -v

honeypot@debian:~$ docker compose -f ~/tpotce/docker-compose.yml down -v
[+] Running 10/10
✔ Container suricata Removed 0.0s
✔ Container ipphoney Removed 0.0s
✔ Container fatt Removed 0.0s
✔ Container kibana Removed 0.1s
✔ Container logstash Removed 0.0s
✔ Container snare Removed 0.0s
✔ Container map_data Removed 0.1s
✔ Container honeytrap Removed 0.0s
✔ Container p0f Removed 0.0s
✔ Container tanner Removed

  • If a single container shows as DOWN you can run docker logs <container-name> for the latest log entries

Metadata

Metadata

Assignees

No one assigned

    Labels

    cannot reproduce

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions