RE: Honeyd import site failed

["Soi, Dhruv" <dsoi () ipolicynetworks com>]

I faced the similar problem sometime back and now couldn't exctly recall how did i troubleshoot that. But I do remember 
that I tried changing IPs of hosts. You can also try the same, like IP of my honeyd is 172.16.16.111 and I have defined 
hosts from 172.16.16.112-120 so same subnet and its working....Previously I was trying it with 10.x.x.x and 192.x.x.x 
for hosts and IP of honeyd box was 172.x.x.x and I was getting similar sort of errors. 

I hope this hit and trial method should resolve you problem...

-----Original Message-----
From: Suen Yek [mailto:syek () student ecu edu au]
Sent: Friday, July 08, 2005 7:10 AM
To: Soi, Dhruv; honeypots () securityfocus com
Subject: RE: Honeyd import site failed


My config file is pretty basic, here is a sample

create host0001
set host0001 personality "3Com / USR TotalSwitch Firmware: 02.02.00R"
add host0001 tcp port 80 open
add host0001 tcp port 23 open       
set host0001 default tcp action reset set host0001 default tcp action
reset
bind  172.16.0.1 host0001

create host0002
set host0002 personality "3Com Access Builder 4000 Switch"
add host0002 tcp port 80 open
add host0002 tcp port 23 open       
set host0002 default tcp action reset
set host0002 default tcp action reset
bind  172.16.0.2 host0002

create host0009
set host0009 personality "3Com NetBuilder-II, OS version
SW/NB2M-BR-5.1.0.27"
add host0009 tcp port 80 open
add host0009 tcp port 23 open       
set host0009 default tcp action reset
bind  172.16.0.9 host0009

In netstat -nr I have
Route add 172.16.0.0 gw 192.168.1.1 (which is the ip of the interface)

I have erased any carriage returns in the file to ensure there isnt any
funny characters getting in the way of honeyd reading the config file.

So... What could it possibly be?

Kind regards,
Suen 

-----Original Message-----
From: Soi, Dhruv [mailto:dsoi () ipolicynetworks com] 
Sent: 4 July 2005 8:59 PM
To: Suen Yek; honeypots () securityfocus com
Subject: RE: Honeyd import site failed


what does your honeyd.conf says?


-----Original Message-----
From: Suen Yek [mailto:syek () student ecu edu au]
Sent: Monday, July 04, 2005 8:31 AM
To: honeypots () securityfocus com
Subject: Honeyd import site failed


Hi All,

Could someone please tell me what the error "import site failed use -v
for traceback" means when honeyd is started (using latest honeyd with
mandrake 10.1). I have checked my config script and commands, all seems
to be well and honeyd starts as a process (but with a tty?) however I
cannot ping the honeyd network (routes been added already) as it says
network unreachable.

If anyone has encounted this error please let me know the meaning and
possible corrective action Thankyou

Kind regards,
Suen