RE: KFSENSOR

["Joshua Berry" <jberry () PENSON COM>]

IDS generally only detect malicious or out of the ordinary activity.
Honeypots will log whatever connections come to that box, not just
malicious traffic.  A honeypot usually doesn't have the logic to only
detect malicious stuff, that is the job of an IDS.

-----Original Message-----
From: ksacaramel () aol com [mailto:ksacaramel () aol com] 
Sent: Thursday, March 17, 2005 6:42 AM
To: honeypots () securityfocus com
Subject: KFSENSOR

hey people,


i just downloaded kfsensor and it has received a lot of activity but 
half of them are not malicious. for eg. connections being made by NIS.

is KFsensor more of an intrusion detection system then a honeypot?

how does it act like a honeypot?

shouldnt it just detect malicious activity?


thanks a lot for any feedback...