Honeypots mailing list archives

Re: honeyd: Connection refused


From: Thorsten Holz <thorsten.holz () mmweg rwth-aachen de>
Date: Wed, 10 Aug 2005 22:11:07 +0200

Tobias Hahn wrote:

$ ping 1.2.3.4
honeyd[]: Sending ICMP Echo Reply: 1.2.3.4 -> 5.6.7.8
Seems to be working, although I get 2 ICMP Echo replies from the honeypot's
IP.

But if you get 2 ICMP Echo replies, that indicates an error. It seems that the TCP/IP stack of your OS also replies to the requests...

How do you route traffic to your honeyd? Or are there other machines in your network that could reply to the address you tried to ping?

Cheers,
  Thorsten


Current thread: