Honeypots mailing list archives

RE: Error running Honeyd-WIN32


From: "Antonio Jose Almeida" <antonio.almeida () mainroad pt>
Date: Fri, 5 Mar 2004 18:49:54 -0000

I have the same problem. I tried to disable the vmware interfaces but it still dosen't work.

Before disabling:

D:\honeyd-0.5>honeyd.exe -W

Interface       Device          Description
-------------------------------------------
1 \Device\NPF_{3FC3B7E4-CFAF-4A97-BAEB-505F5CD3E205}    VMware Virtual Ethernet
Adapter
2 \Device\NPF_{5D2FE9D8-25EF-4674-9CEE-2CE45AD6C7E5}    Intel(R) PRO/100 VE Netw
ork Connection
3 \Device\NPF_{C7C536E8-1864-4FF6-9215-6A7D03FF1B36}    VMware Virtual Ethernet
Adapter

D:\honeyd-0.5>honeyd.exe -i 2 -d -f config.sample
Impossible SI range in Class fingerprint "Windows NT 4 SP3"
intf_get: No such device or address

After disabling:

D:\honeyd-0.5>honeyd.exe -W

Interface       Device          Description
-------------------------------------------
1 \Device\NPF_{5D2FE9D8-25EF-4674-9CEE-2CE45AD6C7E5}    Intel(R) PRO/100 VE Netw
ork Connection

D:\honeyd-0.5>honeyd.exe -i 1 -d -f config.sample
Impossible SI range in Class fingerprint "Windows NT 4 SP3"
Unable to find adapter 1

I have winpcap 3.0, not the new one and I also stopped the vmware services.

Antonio

-----Original Message-----
From: Michael A. Davis [mailto:mike () datanerds net] 
Sent: segunda-feira, 1 de Março de 2004 16:02
To: honeypots () securityfocus com
Subject: RE: Error running Honeyd-WIN32


 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I have looked into this problem again and I cannot reproduce it on a clean Windows 2000 machine with the newest 
WinPCAP(downloaded today) installed. This machine has ONE physical NIC and VMWare is NOT installed.

The problem with VMWare is in libdnet. The defined IFTABLESZ in libdnet is too small to handle a machine with VMWare 
and a network card. Dug Song is aware of the problem.

If you guys can further test and report to me with problems I can try and debug further and come up with a solution.

Thanks,
Michael A. Davis

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.3

iQA/AwUBQENeZdo69WASbsMmEQLQSACg79Ilt1eMjhM4ZlAkqrVDpfsEZjAAoO9n
1UT9u04TXoORXRhQ4+QdaPN3
=sih1
-----END PGP SIGNATURE-----



Current thread: