Glutton
Glutton: A focused Linux honeypot for capturing and routing broad network traffic. Ranked #17 of 21 in Honeypot Software by our editors (7.1/10); pricing: Open source; best for catch-all network traffic capture.
At a glance
- Editor score7.1 / 10
- PricingOpen source
- Best forCatch-all network traffic capture
- Paid fromFree
- Deployment modelSelf-hosted
- Facts checked22 Sep 2026
Where it wins
- Captures TCP and UDP traffic across ports with generic fallbacks
- Supports handlers for HTTP, SMTP, RDP, SMB, FTP, MQTT and more
- Provides JSON logs, rotation, proxy forwarding and optional event output
Where it doesn't
- Self-hosted deployment requires Linux infrastructure
- Platform coverage is limited to Linux
- Integration options are limited to HTTP and hpfeeds event output
Our verdict on Glutton
Glutton is an open-source, self-hosted network honeypot written in Go for security teams that need broad TCP and UDP traffic capture. It accepts activity across ports, applies configurable routing rules, and sends interactions to protocol-specific handlers or generic TCP and UDP fallbacks. Its network-focused decoy scope makes it a fit for teams monitoring unsolicited connections and preserving useful payloads when the protocol is not recognized.
Glutton’s standout capability is its catch-all capture model. It includes handlers for HTTP, SMTP, RDP, SMB, FTP, MQTT, MongoDB and Telnet, while Spicy-based HTTP parsing supports protocol detection and structured handling. Selected connections can be forwarded through a TCP proxy to upstream targets, giving teams a way to route interactions instead of treating every connection as an isolated capture. JSON process logging with rotation supports operational review, and optional HTTP or hpfeeds event producers extend how captured activity can leave the honeypot.
The project is best suited to teams comfortable operating Linux software themselves and tailoring routing, handlers and logging to their monitoring workflow. Its MIT-licensed open-source model avoids a commercial-plan structure, but the trade-off is a narrower platform and ecosystem footprint: deployment is self-hosted on Linux, with event output centered on HTTP and hpfeeds. Choose Glutton when protocol breadth, generic traffic handling and direct control matter most. Choose an alternative when you need hosted deployment, broader platform support or a larger set of ready-made integrations.
Your product? Our editors can test Glutton in depth and publish a review, labelled as paid · from $149/mo →
Glutton pricing
Glutton fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Free |
| Deployment model | Self-hosted |
| Decoy scope | Network |
| Credential lures | Not verified |
| Cloud decoys | Not verified |
| Maximum decoys | Not verified |
| Data retention | Not verified |
| Deployment | Self-hosted |
| Platforms | Linux |
| Support | Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Pricing | Open source |
| Website | github.com |
| Facts checked | 22 Sep 2026 |
Alternatives to Glutton
- BeelzebubA flexible self-hosted honeypot runtime with adaptive interactions and deep security integrations.9.4
- CowrieA mature, deep SSH and Telnet honeypot for self-hosted threat monitoring.9.2
- T-PotA broad self-hosted honeypot platform for teams that want many decoys and built-in analysis.9.0
See all Glutton alternatives →
Used Glutton? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Glutton for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Glutton is listed in our Honeypot Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/glutton/"><img src="https://www.itechguides.com/best/badge/glutton.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update