Honeypots mailing list archives

Re: honeywall picks up all networks from hub


From: "Colin Copley" <colin.75 () btinternet com>
Date: Tue, 11 Apr 2006 00:18:53 +0100

yes, the hub transmits received data to all it's interfaces, you will need
to move it to your side of the honeywall, on the home LAN & replace with a
switch or router on the internet side.

Regards
Colin
----- Original Message ----- 
From: "mat" <mr () simla colostate edu>
To: <honeypots () securityfocus com>
Sent: Monday, April 10, 2006 9:39 PM
Subject: honeywall picks up all networks from hub


| my honeywall (honeynet.org roo) is picking up all the traffic from my
| hub, im assuming its because thats how a hub works, but is there any way
| to stop it.  i have two networks set up like this...
|
|
| internet---hub---honeywall---router---honeynet
|                       \---router---home network
|
|
| i see information on walleye from my home networks IP address.  if it is
| going to log everything from the home network its going to be really
| hard to sift out the data from just the honeynet... can i stop this
| somewhere in the software? thanks in advance


Current thread: