Re: help with honeyd linux kit install

[Lance Spitzner <lance () honeynet org>]

On Aug 30, 2004, at 5:36, Jim Clayson wrote:

> Hi,
>
> I have a question relating to the install of the latest honeyd linux 
> kit  (honeyd-linux-kit-0.6). (Apologies if this message appears more 
> than once - I am new to this subscription)

Not sure where you got the Honeyd linux kit.  The latest one is 
honeyd-0.7a-beta4.tgz.  The one you have (0.6) is over  a year old.
> When I run 'start-honeyd.sh' I get the following message:
>
> ./start-honeyd.sh: line 12: 25321 Segmentation fault      (core 
> dumped) ./honeyd -p nmap.prints -f honeyd.conf -x xprobe2.prints -a 
> nmap.assoc -l /var/log/honeyd 192.168.1.201-192.168.1.204
>
> What can I do to resolve this problem?

My first suggestion would be upgrade to the latest toolkit 
(http://www.tracking-hackers.com/solutions/honeyd).  This toolkit is 
based on Honey 0.7a, I need to get off my lazy butt and upgrade it to 
the latest version of Honeyd.

Second, change the network it monitors to an entire network block 
(192.168.1.0/24).  For some reason I've seen this help on other 
systems.

Hope this helps!

lance