Main - News - Forums
Niels Provos and Thorsten Holz
Re: A simple questions on redirecting USER_IN_DEF_WHITELIST autolearn=no version=2.63
Date: 29 Mar 2004 06:32:22 -0000
('binary' encoding is not supported, stored as-is) In-Reply-To: <20040204090709.30824.qmail_at_web21409.mail.yahoo.com>
I may be misunderstanding your question, but it seems to me that all you need is arpd. arpd is a simple little program that looks at arp requests sent out by computers to IP addresses. If an IP is owned by a computer, it will respond to the request with an "arp response" packet saying where the computer is. If no computer responds within a certain time limit (3 secs?), arpd sends its own response, redirecting traffic to your computer (ie: honeypot).
On the honeyd web page,
NB: This is a filtered version of the Honeypots mailing list. Only posts that concern Honeyd are shown here. For more recent discussions visit the forums.
Copyright (c) 1999-2004 by Niels Provos
Don't access my pirated music.