Honeypots mailing list archives

Re: Problems running FTP.sh


From: Niels Provos <provos () citi umich edu>
Date: Thu, 21 Apr 2005 22:04:28 -0400

Please, try the following release candidate:

  http://www.citi.umich.edu/u/provos/honeyd/honeyd-1.0a-rc2.tar.gz
  http://www.citi.umich.edu/u/provos/honeyd/honeyd-1.0a-rc2.tar.gz.sig

Niels.

On Thu, Apr 21, 2005 at 02:38:51PM +0530, Rajnish Sharma wrote:
Hi Janvi,
       Well first of all u need to tell which Linux Distribution &
what version of kernel u are running.
       If we assume a RH9 Distro the the problem is not with the
ftp.sh script. RH9 treats ftp as deprecated and uses wftp etc. . I
have run the ftp.sh as it is and it runs fine with Honeyd1. ( except
for the fact that Honeyd1 has a bug  which causes it to do
segmentation faults and the patch for which hasn't been released yet
by Mr. Provos) I hope he does that soon or i'll be stuck where i am
till that happens
Regards
Rajnish

On 4/18/05, Janvi Badlaney <janvibadlaney () yahoo com> wrote:
Hi, 
I am a graduate student and i am doing a research paper on honeypots.I need
help urgently as i am stuck and need to submit my paper within a week. 
  
I have installed honeyd and want to get the ftp.sh - ftp service available
at http://www.honeyd.org/contrib.php running. 
  
After debugging the script(ftp.sh downloaded from www.honeyd.org) I have
come to know that it is getting stuck at the line 
while read incmd parm1 parm2 parm3 parm4 parm5
do
...
done
The program is unable to read from the console and hence is not entering
the while loop. 
  
When i run the ftp program e.g. ftp 10.0.0.1 21, honeyd does trap this
attempt so i am assuming honeyd is running fine. I am running honeyd v1.0 on
Linux. 
  
1)Can anyone guide me as to how to run the FTP program. 
2)Does the location of the scripts matter.Currently i have put the ftp.sh in
a folder called ftp and made changes in the configuration file - i.e. the
template to point to this location. 
3)If i wanna make any changes/enhance the FTP script, do i need to
understand the honeyd code.  
  
Help is appreciated. 
Thanks in advance, 
janvi 
 

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com


Current thread: