RE: honeypot software for windows.

["Scott Mraz" <SMraz () co riverside ca us>]

You might want to look at Honeyd for win32:

http://www.securityprofiling.com/honeyd/honeyd.shtml

to get an idea of what is out there. I believe Honeyd is the only decent
(in my perspective and thus far)honeypot for win32 systems.



Regards,
 
-Scott R. Mraz
Systems Admin
County of Riverside, IT
1-909-955-9660
SMraz () co riverside ca us
 

-----Original Message-----
From: ???? ???? - Moran Zavdi <moranz () data-sec com> 
Sent: Monday, April 21, 2003 10:49 AM
To: honeypots () securityfocus com
Subject: honeypot software for windows.

Hi,

while ago I searched for simple honeypot program for windows.

what I was looking for is a prgram that do as follow:

1. running on windows.
2. starting up fake services like web/ftp/mail.
3. logging activity.
4. free :)

I didnt found so I sat down and started writing my own.

now its almost complete.
however I have the following questions.

anyone knows of web sites like sourceforge that hosting free programs
home
page (without source code) ?
are there any other programs such as this one?
what you consider as the most important things in such  honeypot
software
(logging/services, etc) ?

thanks,
Moran Zavdi.