Honeypots mailing list archives

Honeyd Config


From: "jwoloz" <jwoloz () gyushu com>
Date: Mon, 01 Mar 2004 17:37:53 +0000


Hello all,
 I realize that the question has probably been asked about a thousand times, but I cant seem to find it anywhere 
online.  Im trying to run a version of honeyd-0.8 on a Redhat 8.0 distribution.  I have been trying to run it with 
several different templates and I keep getting errors that a personality is not defined and that the file can not be 
read.  Here is a simplified version Im trying to run from the man himself Spitzner (the IP addresses are not changed to 
protect myself). Can anyone offer some insite as to why I get the personality failure, even though I have specified the 
prints file and the template is correct?
Thanx
-Jason
 
arpd 192.168.1.0/24
honeyd -p nmap.prints -f honeyd.conf 192.168.1.0/24

## Honeyd configuration file ##
### Windows computers (default)
create default
set default personality "Windows NT 4.0 Server SP5-SP6"
set default default tcp action reset
add default tcp port 110 "sh scripts/pop.sh"
add default tcp port 80 "perl scripts/iis-0.95/main.pl"
add default tcp port 25 block
add default tcp port 21 "sh scripts/ftp.sh"
add default tcp port 22 proxy $ipsrc:22
add default udp port 139 drop
set default uptime 3284460
### Cisco router
create router
set router personality "Cisco 4500-M running IOS 11.3(6) IP Plus"
add router tcp port 23 "/usr/bin/perl scripts/router-telnet.pl"
set router default tcp action reset
set router uid 32767 gid 32767
set router uptime 1327650
# Bind specific templates to specific IP address
# If not bound, default to Windows template
bind 192.168.1.150 router



Current thread: