Honeypots mailing list archives
honeypot+ids?
From: Kostas K <acezerocool () yahoo com>
Date: 11 Aug 2003 18:30:40 -0000
Hi list, In the case of a low-interaction honeypot i would say that it is acceptable the to use both ids+honeypot on the same machine. But what about in a high-interaction honeypot? I have a router/switch (netgear) how can i possibly redirect data from the honeypot to the ids? Any ideas? Thanks
Current thread:
- honeypot+ids? Kostas K (Aug 11)
- Re: honeypot+ids? Patrick Dolan (Aug 11)
- Re: honeypot+ids? Jose Nazario (Aug 11)
- <Possible follow-ups>
- Re: honeypot+ids? Kostas K (Aug 13)
- Re: honeypot+ids? Patrick Dolan (Aug 11)