Support Honeyd

Is it one way to detect honeypot?

From: wanfat wu <fred_honeypot_at_yahoo.com.hk>
Date: Wed, 11 Feb 2004 23:54:26 +0800 (CST)

Hi All,

  I am running honeyd with arpd. It can answer with unused IP. However, when I use some programs to check the MAC address of virtual hosts(unused IP), it always answer with the MAC address of honeyd host.

  By looking at the MAC address, all the MAC are the same! Is it one way to detect honeypot? Anything to hide my honeypot?

Thanks!

Best,
Fred

必殺技、飲歌、小星星...
浪漫鈴聲情心連繫
http://ringtone.yahoo.com.hk/
Received on Wed Feb 11 2004 - 11:30:35 PST

This message: [ Message body ]
Next message: Cedric Blancher: "Re: Is it one way to detect honeypot?"
Previous message: Sorin Florea: "honeyd routing problem"
Next in thread: Cedric Blancher: "Re: Is it one way to detect honeypot?"

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]

Search For Information

NB: This is a filtered version of the Honeypots mailing list. Only posts that concern Honeyd are shown here. For more recent discussions visit the forums.

Honeyd Resources

Honeyd Research

Honeypot Resources

Honeypot Books

Happy Hacking

Support Honeyd

Search Amazon

Is it one way to detect honeypot?