Honeyd and OpenBSD 3.2 *resolved*

Hi again!

Found the solution. =)

I should have just believed the honeyd documentation and used arpd. By
creating an IP alias, I made OpenBSD itself listen to the alias address.
I did'nt understand this until I tried pinging the address -- I got
*two* replies, one from OpenBSD and one from honeyd:

21:12:58.092266 10.1.1.100 > 10.1.1.222: icmp: echo request
21:12:58.092442 10.1.1.222 > 10.1.1.100: icmp: echo reply
21:12:58.095738 10.1.1.222 > 10.1.1.100: icmp: echo reply

So, when I tried to connect to 10.1.1.222 port 80, honeyd started the
conversation as supposed to -- but OpenBSD immediately sent TCP reset as
from it's point of view no-one was listening to that port.

- Jyri
Received on Sun Sep 28 2003 - 19:59:08 PDT