Re: how efficiently I can use honeyd/Hoenypots

Hi Ravi,

My comments inline.....

Ravi wrote:

> Greetings all,
> .........
> I request if anyone who have evaluated any IPS products share their
> experiences and help to do so. And any idea of Nessus scripts to
> evaluate IPS.

The configuration you have suggested is very much reality as of today.
You could use nessus to test your IPS that lies between a honeypot
network or may be any system running any os. Basically you just require
a reachable system behind the IPS to receieve the packets. So all you
need to do is run nessus using all its plugins and if you are a one on
writing your own plugins then you could make your own script that works
much like nessus or may be a part of nessus. Yes honeypot technology has
evolved a lot over time and tools like honeyd have been a revelation.

Hope this answers your question.

-dev
Received on Fri Dec 19 2003 - 18:49:41 PST