We`re trying to setup a very small network topology, but it`s not working.
I don`t know why honeyd doesn`t work...
mary:~ # ifconfig
eth0 Link encap:Ethernet HWaddr 00:08:A1:4D:AA:7C
inet addr:192.168.100.41 Bcast:192.168.100.255
Mask:255.255.255.0
inet6 addr: fe80::208:a1ff:fe4d:aa7c/64 Scope:Link
UP BROADCAST NOTRAILERS RUNNING MULTICAST MTU:1500 Metric:1
RX packets:20121 errors:0 dropped:0 overruns:0 frame:0
TX packets:19171 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:18610347 (17.7 Mb) TX bytes:1494266 (1.4 Mb)
Interrupt:9 Base address:0x1c00
mary:~ # route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use
Iface
192.168.100.0 0.0.0.0 255.255.255.0 U 0 0 0
eth0
0.0.0.0 192.168.100.1 0.0.0.0 UG 0 0 0
eth0
mary:/etc/honeyd # less honeyd-new-test.conf
route entry 192.168.100.202 network 192.168.0.0/16
route 192.168.100.202 link 192.168.1.0/24
bind 192.168.1.51 linux
bind 192.168.1.52 linux
bind 192.168.1.53 windows
### Windows NT4 web server
create windows
set windows personality "Microsoft Windows XP Professional SP1"
add windows tcp port 80 "perl scripts/iis-0.95/iisemul8.pl"
add windows tcp port 139 open
add windows tcp port 137 open
add windows udp port 137 open
add windows udp port 135 open
set windows default tcp action reset
set windows default udp action reset
set windows uptime 1336262
set windows ethernet "00:20:ED:78:C5:A1"
### Cisco Router
create router
set router personality "Cisco IOS 11.3 - 12.0(11)"
set router default tcp action reset
set router default udp action reset
add router tcp port 23 "/usr/bin/perl scripts/router-telnet.pl"
set router uid 32767 gid 32767
set router uptime 1327650
set router ethernet "00:20:ED:78:C5:A2"
### Linux web server
create linux
set linux personality "Linux Kernel 2.4.20"
add linux tcp port 80 "bash scripts/web.sh"
add linux tcp port 21 "bash scripts/ftp.sh"
add linux tcp port 25 "bash scripts/smtp.sh"
set linux default tcp action reset
set linux default udp action reset
set linux uptime 5223212
set linux ethernet "00:20:ED:78:C5:A3"
ary:/etc/honeyd # honeyd -d -f /etc/honeyd/honeyd-new-test.conf
Honeyd V0.8b Copyright (c) 2002-2004 Niels Provos
honeyd[2399]: started with -d -f /etc/honeyd/honeyd-new-test.conf
Warning: Impossible SI range in Class fingerprint "IBM OS/400 V4R2M0"
Warning: Impossible SI range in Class fingerprint "Microsoft Windows NT
4.0 SP3"
honeyd[2399]: listening promiscuously on eth0: (arp or ip proto 47 or
(ip )) and not ether src 00:08:a1:4d:aa:7c
/etc/honeyd/honeyd-new-test.conf:39: Template "linux" is configured with
ethernet address but there is no interface that can reach 192.168.1.51
/etc/honeyd/honeyd-new-test.conf:40: Template "linux" is configured with
ethernet address but there is no interface that can reach 192.168.1.52
/etc/honeyd/honeyd-new-test.conf:41: Template "windows" is configured with
ethernet address but there is no interface that can reach 192.168.1.53
honeyd: parsing configuration file failed
mary:/etc/honeyd #
I really don`t know why honeyd`s complaining... As I understood the config
of honeyd, there should be 192.168.100.202 es the entry into the network
192.168.1.16 where the three hosts are set up. And 192.168.100.202 is
reachable locatet in my "real" lan, which is 192.168.100.0/24.
Can anybody help me please?
Thanks!
Peer
Received on Fri Jun 04 2004 - 17:30:12 PDT
