Re: honeyd

[victor calzado <vcalzado () gmail com>]

Hi David,

On 5/4/05, David Halsband <david.halsband () gmail com> wrote:
> Hi everyone,
>  
>  my honeyd is not working anymore and I don't know why.
>  
>  When I am trying to ping from a host in my local network (e.g.
> 172.16.0.237) to one of my virtual hosts (e.g. 172.16.0.233), I get the
> following error message in honeyd:
>  
>  Sending ICMP Echo Reply: 172.16.0.233 -> 172.16.0.237
>  couldn't send packet: Operation not permitted
>  

Have you change your kernel?
Have you updated the libnet packet?

>  I use arpd to redirect the packets, which is working fine. Ethereal shows,
> that really no Echo Reply is sent.
>  
>  Why? What am I doing wrong?
>  Any thoughts? Any suggestions?


I'm not sure but i think arpd use libpcap to capture packets but
honeyd use libnet to "send"  packets. Maybe something in libnet or
something needed by libnet have been broken.
Have you try to recompile honeyd? 


>  
>  Bye,
>  David
>  
Regards,
Victor