GRE tunnels, honeyd and honeypot farms

["Peter Bates" <Peter.Bates () lshtm ac uk>]

Hello all...

This has been mentioned before:
http://lists.insecure.org/lists/honeypots/2003/Jul-Sep/0066.html 
in terms of using GRE tunnels to direct traffic to a centralized 
'honeypot farm'.

I'd be interested in hearing from anyone actually doing this, and how
they achieved it?

I'm in particular looking for things people can achieve with items like
edge routers rather than having to deploy honeyd - the router would
tunnel or perform NAT on the traffic to pass it to the honeyd box(es).

Thanks...



--------------------------------------------------------------------------------------------------->
Peter Bates, Systems Support Officer, Network Support Team.
London School of Hygiene & Tropical Medicine.
Telephone:0207-958 8353 / Fax: 0207- 636 9838