Monkey.org Developments
Honeyd Mailing List: Honeyd and OpenBSD 3.2 *resolved*

Support Honeyd

Search:
Keywords:

Search Amazon

 
 

Honeyd and OpenBSD 3.2 *resolved*

From: Jyri Hovila <jyri.hovila_at_iki.fi>
Date: Sun, 28 Sep 2003 21:46:51 +0300

Hi again!

Found the solution. =)

I should have just believed the honeyd documentation and used arpd. By
creating an IP alias, I made OpenBSD itself listen to the alias address.
I did'nt understand this until I tried pinging the address -- I got
*two* replies, one from OpenBSD and one from honeyd:

21:12:58.092266 10.1.1.100 > 10.1.1.222: icmp: echo request
21:12:58.092442 10.1.1.222 > 10.1.1.100: icmp: echo reply
21:12:58.095738 10.1.1.222 > 10.1.1.100: icmp: echo reply

So, when I tried to connect to 10.1.1.222 port 80, honeyd started the
conversation as supposed to -- but OpenBSD immediately sent TCP reset as
from it's point of view no-one was listening to that port.

- Jyri
Received on Sun Sep 28 2003 - 19:59:08 PDT

Search For Information
Google
Search WWW Search www.honeyd.org

NB: This is a filtered version of the Honeypots mailing list. Only posts that concern Honeyd are shown here. For more recent discussions visit the forums.