New README on examples/port-scan, examples section on README.md and c…

…lean-up docker-compose.example.yml.

README.md

@@ -46,6 +46,14 @@ And finally simply run Docker-Compose:
 $ docker compose .
 ```
 
+## Examples
+
+The examples directory includes various scenarios to emulate and capture network traffic of popular tools and interactions:
+
+* [Port scan with nmap](examples/port-scan/README.md)
+* [SSH brute force with HYDRA](examples/ssh-brute-force/README.md)
+
+
 ## License
 This framework is released under the [LGPL-3.0](LICENSE). Feel free to use, modify, and distribute it in accordance with the terms of the license.
 

docker-compose.example.yml

@@ -7,37 +7,8 @@ services:
       dockerfile: Dockerfile.dorothea
     network_mode: "host"
     volumes:
+      # This directory is mounted to retrieve the pmacct configuration
+      # and to dump the captured netflows outside the container.
       - .:/dorothea
 
   # YOUR ACTIONS: Remove the example service below and add your own
-  guinea-pig:
-    build:
-      context: .
-      dockerfile: Dockerfile.guineapig
-    network_mode: "bridge"
-    ports:
-      - "80:80"
-    healthcheck:
-      test: ["CMD-SHELL", "service ssh status || exit 1"]
-      interval: 10s
-      timeout: 5s
-      retries: 5
-    deploy:
-      resources:
-        limits:
-          cpus: '1.0'     # Limit to 1.0 CPUs
-          memory: 1024M    # Limit to 1024 MB of RAM
-        reservations:
-          cpus: '0.25'    # Reserve 0.5 CPUs
-          memory: 512M    # Reserve 512 MB of RAM
-
-  attacker:
-    build:
-        context: .
-        dockerfile: Dockerfile.attacker
-    network_mode: "bridge"
-    depends_on:
-      guinea-pig:
-        condition: service_healthy
-    command: ["nmap", "-p0-", "-v", "-A", "-T4", "172.17.0.0/16"]
-

examples/port-scan/README.md

@@ -0,0 +1 @@
+# Port scan