RE: Error running Honeyd-WIN32

I have the same problem. I tried to disable the vmware interfaces but it still dosen't work.

Before disabling:

D:\honeyd-0.5>honeyd.exe -W

Interface Device Description
-------------------------------------------
1 \Device\NPF_{3FC3B7E4-CFAF-4A97-BAEB-505F5CD3E205} VMware Virtual Ethernet
Adapter
2 \Device\NPF_{5D2FE9D8-25EF-4674-9CEE-2CE45AD6C7E5} Intel(R) PRO/100 VE Netw
ork Connection
3 \Device\NPF_{C7C536E8-1864-4FF6-9215-6A7D03FF1B36} VMware Virtual Ethernet
Adapter

D:\honeyd-0.5>honeyd.exe -i 2 -d -f config.sample
Impossible SI range in Class fingerprint "Windows NT 4 SP3"
intf_get: No such device or address

After disabling:

D:\honeyd-0.5>honeyd.exe -W

Interface Device Description
-------------------------------------------
1 \Device\NPF_{5D2FE9D8-25EF-4674-9CEE-2CE45AD6C7E5} Intel(R) PRO/100 VE Netw
ork Connection

D:\honeyd-0.5>honeyd.exe -i 1 -d -f config.sample
Impossible SI range in Class fingerprint "Windows NT 4 SP3"
Unable to find adapter 1

I have winpcap 3.0, not the new one and I also stopped the vmware services.

Antonio

-----Original Message-----
From: Michael A. Davis [mailto:mike_at_datanerds.net]
Sent: segunda-feira, 1 de Março de 2004 16:02
To: honeypots_at_securityfocus.com
Subject: RE: Error running Honeyd-WIN32

 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I have looked into this problem again and I cannot reproduce it on a clean Windows 2000 machine with the newest WinPCAP(downloaded today) installed. This machine has ONE physical NIC and VMWare is NOT installed.

The problem with VMWare is in libdnet. The defined IFTABLESZ in libdnet is too small to handle a machine with VMWare and a network card. Dug Song is aware of the problem.

If you guys can further test and report to me with problems I can try and debug further and come up with a solution.

Thanks,
Michael A. Davis

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.3

iQA/AwUBQENeZdo69WASbsMmEQLQSACg79Ilt1eMjhM4ZlAkqrVDpfsEZjAAoO9n
1UT9u04TXoORXRhQ4+QdaPN3
=sih1
-----END PGP SIGNATURE-----
Received on Fri Mar 05 2004 - 15:23:07 PST