Honeypots mailing list archives
Is it one way to detect honeypot?
From: wanfat wu <fred_honeypot () yahoo com hk>
Date: Wed, 11 Feb 2004 23:54:26 +0800 (CST)
Hi All, I am running honeyd with arpd. It can answer with unused IP. However, when I use some programs to check the MAC address of virtual hosts(unused IP), it always answer with the MAC address of honeyd host. By looking at the MAC address, all the MAC are the same! Is it one way to detect honeypot? Anything to hide my honeypot? Thanks! Best, Fred 必殺技、飲歌、小星星... 浪漫鈴聲 情心連繫 http://ringtone.yahoo.com.hk/
Current thread:
- Is it one way to detect honeypot? wanfat wu (Feb 11)
- Re: Is it one way to detect honeypot? ravivsn (Feb 12)
- Re: Is it one way to detect honeypot? Cedric Blancher (Feb 12)
- Re: Is it one way to detect honeypot? Olaf Gellert (Feb 12)
- Re: Is it one way to detect honeypot? wanfat wu (Feb 13)
- Re: Is it one way to detect honeypot? Olaf Gellert (Feb 12)
- Re: Is it one way to detect honeypot? wanfat wu (Feb 13)