Honeypots mailing list archives

real ip with honeyd


From: Oğuz Yarımtepe <comp.ogz () gmail com>
Date: Sat, 15 Sep 2007 05:30:56 +0300

Hi,

I was trying to see the attackers behaviour and deployed a honeyd to a 
machine. But i gave real ips to the simulated systems, so the bind parts have 
real ips. I had a arpd problem also so i couldnt make it work, does honeyd 
work with real ips?

According to the explanations, honeyd is deployed to a real ip machine. I saw 
some log entries that a real ip was trying to reach to one of the simulated 
machines, so how do the attackers see those simulated ips?

Thanx.

-- 
Oğuz Yarımtepe
http://www.yarimtepe.com


Current thread: