Honeypots mailing list archives
Honeyd and OpenBSD 3.2 *resolved*
From: Jyri Hovila <jyri.hovila () iki fi>
Date: Sun, 28 Sep 2003 21:46:51 +0300
Hi again! Found the solution. =) I should have just believed the honeyd documentation and used arpd. By creating an IP alias, I made OpenBSD itself listen to the alias address. I did'nt understand this until I tried pinging the address -- I got *two* replies, one from OpenBSD and one from honeyd: 21:12:58.092266 10.1.1.100 > 10.1.1.222: icmp: echo request 21:12:58.092442 10.1.1.222 > 10.1.1.100: icmp: echo reply 21:12:58.095738 10.1.1.222 > 10.1.1.100: icmp: echo reply So, when I tried to connect to 10.1.1.222 port 80, honeyd started the conversation as supposed to -- but OpenBSD immediately sent TCP reset as from it's point of view no-one was listening to that port. - Jyri
Current thread:
- Honeyd and OpenBSD 3.2 *resolved* Jyri Hovila (Sep 28)