Honeypots mailing list archives

honeyd and arpd on Solaris 9


From: Tobias Hahn <tobi_wan () gmx de>
Date: Tue, 28 Jun 2005 18:36:05 +0200

Hi,

I have installed honeyd 1.0 and arpd 0.2 on Solaris 9 on a Sparc64. I
used openpkg to create RPMs from the *.tar.gz files and it worked. But
if I start arpd it does nothing, at least ist not redirecting the IP
packets to the computer it runs on. I don't even get the "arpd[12457]:
listening on fxp0: arp and not ether src 00:ff:ff:ff:ff:ff" message.
I've used arpd before on Suse and there I always got the
"...listening..." message.

Another thing: if I start honeyd it closes and I get the following error:
Jun 28 18:30:49 server honeyd[9127]: [ID 382462 daemon.notice] started
with -i eri0 -f /opt/local/RPM/SRC/honeyd/honeyd.conf xxx.xxx.xxx.221
Jun 28 18:30:49 server honeyd[9128]: [ID 106172 daemon.notice] Demoting
process privileges to uid 32767, gid 32767
Jun 28 18:30:49 server honeyd[9128]: [ID 843016 daemon.error] Kqueue
does not recognize bpf filedescriptor.

Does anybody know why it won't work?

Thanks in advance,
   Tobias


Current thread: