RE: Honeypot Server

["Timmothy Lester" <Timmothy.Lester () primeadvisors com>]

When you say "best", what do you mean? There really is no best, but I'll
point out a few good ones and you can make a descision that best fits
your situation.  (if the links don't work, use google)

KFSensor: is a cool host-based (IDS) && honeypot with features such as
simulating trojans listning on ports.  This is also a lightweight
application. www.keyfocus.net/kfsensor/

Honeypot-SPECTER: www.netsec.ch


Some useful links that pertain to your question.  
#honeyd (virtual honeypot)for linux/windows/freeBSD
http://www.honeyd.org/ <<<
"http://www.citi.umich.edu/u/provos/papers/honeyd-eabstract.pdf"; <<
http://www.honeyd.org/faq.php#windows
**what is a virtual honeypot? http://www.honeynet.org/papers/virtual/

#bochs
http://bochs.sourceforge.net/
http://www.honeynet.org/tools/index.html

**Keep in mind, honeypots are detectable, and can possibly add an extra
attack vector for experienced hackers; but good for worms and botnets.

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of m.farid.shawara () gmail com
Sent: Thursday, January 17, 2008 2:10 AM
To: security-basics () securityfocus com
Subject: Honeypot Server

Dear All :

Can you advise what is the best honeypot server available
Open-source or commercial - it doesn't matter as long as it will be easy
to
administrate and easy to monitor and alerted ...

Mohamed Farid ...