Monkey.org Developments
Honeyd Mailing List

Support Honeyd

Search:
Keywords:

Search Amazon

 
 

Re: [mailinglists] SMB lure and honeyd's subsystem virtualization

From: KeyFocus <support_at_keyfocus.net>
Date: Fri, 28 Nov 2003 16:08:55 -0000

Hi

> does anybody have tried to build an SMB lure using samba and honeyd's
subsystem virtualization yet?
> I have tried using the following config [section], ending up with a
problem:
>
SMB is a mess of multiple protocols and sub-systems which all have to be
working even to do basic operations. If anyone of these is not configured
properly then SMB is likely to fail.
Maybe someone on the Samba team can tell you how to load Samba with the
sub-system e.g. srvsvc, samr etc disabled.

>
> Any ideas what's going wrong?
> Or any ideas or alternatives building an SMB lure using honeyd and samba
(except proxying traffic to port 139 etc.)?
>

A custom Samba build, with a lot of the service functionality stubed out, is
probably the best option.
We looked into this but opted instead to develop a SMB emulation from the
ground up.

> Thanks, Sven.
>

- Tom
www.keyfocus.net
Received on Fri Nov 28 2003 - 14:47:57 PST

Search For Information
Google
Search WWW Search www.honeyd.org

NB: This is a filtered version of the Honeypots mailing list. Only posts that concern Honeyd are shown here. For more recent discussions visit the forums.