RE: honeyd and arpd on Solaris 9

["Prashant Meswani" <prashant.meswani () ukonline co uk>]

Would the following link be of any use?

http://seclists.org/lists/honeypots/2002/Oct-Dec/0009.html

The opinions expressed in this email are those of my own and does not
represent those of any organisation or associations to which I belong to
unless stated otherwise.

-----Original Message-----
From: Tobias Hahn [mailto:tobi_wan () gmx de] 
Sent: 28 June 2005 17:36
To: honeypots () securityfocus com
Subject: honeyd and arpd on Solaris 9

Hi,

I have installed honeyd 1.0 and arpd 0.2 on Solaris 9 on a Sparc64. I
used openpkg to create RPMs from the *.tar.gz files and it worked. But
if I start arpd it does nothing, at least ist not redirecting the IP
packets to the computer it runs on. I don't even get the "arpd[12457]:
listening on fxp0: arp and not ether src 00:ff:ff:ff:ff:ff" message.
I've used arpd before on Suse and there I always got the
"...listening..." message.

Another thing: if I start honeyd it closes and I get the following error:
Jun 28 18:30:49 server honeyd[9127]: [ID 382462 daemon.notice] started
with -i eri0 -f /opt/local/RPM/SRC/honeyd/honeyd.conf xxx.xxx.xxx.221
Jun 28 18:30:49 server honeyd[9128]: [ID 106172 daemon.notice] Demoting
process privileges to uid 32767, gid 32767
Jun 28 18:30:49 server honeyd[9128]: [ID 843016 daemon.error] Kqueue
does not recognize bpf filedescriptor.

Does anybody know why it won't work?

Thanks in advance,
   Tobias