Bug: Elastichoney shows false destination IP and source port

[Philelis]

Hey,
I tested Elastichoney and saw a false destination_ip. It is every time 1.1.1.1, which is definitely not the IP of the destination. Can someone reproduce this error? I think there is the same issue with source_port.

{ "_id" : ObjectId(""), "destination_ip" : "1.1.1.1", "protocol" : "http", "hpfeed_id" : ObjectId(""), "timestamp" : ISODate("2017-03-13T12:16:35.071Z"), "source_ip" : "192.168.122.1", "source_port" : 0, "destination_port" : 9200, "identifier" : "", "honeypot" : "elastichoney" }

Thanks a lot 👍

[Philelis]

Fix for IP address is in Pull Request #3 from Threatstream/elastichoney. I don't know where to find port.