Honeypots mailing list archives
Honeyd Config
From: "jwoloz" <jwoloz () gyushu com>
Date: Mon, 01 Mar 2004 17:37:53 +0000
Hello all, I realize that the question has probably been asked about a thousand times, but I cant seem to find it anywhere online. Im trying to run a version of honeyd-0.8 on a Redhat 8.0 distribution. I have been trying to run it with several different templates and I keep getting errors that a personality is not defined and that the file can not be read. Here is a simplified version Im trying to run from the man himself Spitzner (the IP addresses are not changed to protect myself). Can anyone offer some insite as to why I get the personality failure, even though I have specified the prints file and the template is correct? Thanx -Jason arpd 192.168.1.0/24 honeyd -p nmap.prints -f honeyd.conf 192.168.1.0/24 ## Honeyd configuration file ## ### Windows computers (default) create default set default personality "Windows NT 4.0 Server SP5-SP6" set default default tcp action reset add default tcp port 110 "sh scripts/pop.sh" add default tcp port 80 "perl scripts/iis-0.95/main.pl" add default tcp port 25 block add default tcp port 21 "sh scripts/ftp.sh" add default tcp port 22 proxy $ipsrc:22 add default udp port 139 drop set default uptime 3284460 ### Cisco router create router set router personality "Cisco 4500-M running IOS 11.3(6) IP Plus" add router tcp port 23 "/usr/bin/perl scripts/router-telnet.pl" set router default tcp action reset set router uid 32767 gid 32767 set router uptime 1327650 # Bind specific templates to specific IP address # If not bound, default to Windows template bind 192.168.1.150 router
Current thread:
- Honeyd Config jwoloz (Mar 01)
- Re: Honeyd Config captgoodnight (Mar 01)