Honeypots mailing list archives

regarding http emulation


From: Sujata Y <y_sujata () yahoo co in>
Date: Sun, 9 Feb 2003 11:13:22 +0000 (GMT)

 Hi,
        This is Sujata Yeldi. We a group of five are working
on honeypots. Our aim is to build a production
honeypot. We wish to emulate http service ,but could u
let me know what should all should be provided in a
fake http service.

         I have studied existing honeypots ,their http
emulation. Some just provide reply codes for whatever
commands we enter. does fake http emulation simply
mean just provide reply codes and  do not perform any
operation. what is the need for http emulation
....like ftp and telnet are emulated for the purpose
of keeping track of activities of attacker... could u
PLEASE let me know what is the use of http emulation
for honeypots. Like in  telnet and ftp emulation ...we
are keeping track of the activities of attacker
....but how does HTTP EMULATION HELP HONEYPOT GAIN
INFORMATION ABOUT THE ATTACKER.

Waiting eagerly for your reply   !!!!!!
Thanking You,
Regards,
Sujata Y


=====
The feeling that you have achieved High
must be the feeling that should be kept Low
so got to scale more heights. !!!!!
           Take Care....

________________________________________________________________________
Missed your favourite TV serial last night? Try the new, Yahoo! TV.
       visit http://in.tv.yahoo.com


Current thread: