Re: how efficiently I can use honeyd/Hoenypots

[Devilscrow Sr <devilscrow () gawab com>]

Hi Ravi,

My comments inline.....

Ravi wrote:

> Greetings all,
> .........
> I request if anyone who have evaluated any IPS products share their 
> experiences and help to do so. And any idea of Nessus scripts to 
> evaluate IPS.

The configuration you have suggested is very much reality as of today. 
You could use nessus to test your IPS that lies between a honeypot 
network or may be any system running any os. Basically you just require 
a reachable system behind the IPS to receieve the packets. So all you 
need to do is run nessus using all its plugins and if you are a one on 
writing your own plugins then you could make your own script that works 
much like nessus or may be a part of nessus. Yes honeypot technology has 
evolved a lot over time and tools like honeyd have been a revelation.

Hope this answers your question.

-dev