Honeypots mailing list archives
Re: DNS honeypots?
From: Jason Ross <algorythm () gmail com>
Date: Wed, 3 Mar 2010 10:29:26 -0500
On Wed, Mar 3, 2010 at 9:55 AM, Brent Huston <lbhlists () gmail com> wrote:
Likely nothing today, most malware isn't smart enough to figure that out. On Mar 3, 2010, at 10:38 AM, Jason Lewis wrote:Slightly related, I was wondering what might happen if I made every query to the honeypot resolve back to the honeypot?
But it would have the advantage of allowing you to capture further traffic for analysis through whatever tools you choose. -- jason
Current thread:
- Re: DNS honeypots?, (continued)
- Re: DNS honeypots? Tillmann Werner (Mar 02)
- Re: DNS honeypots? Jason Ross (Mar 02)
- Re: DNS honeypots? Jason Lewis (Mar 02)
- Re: DNS honeypots? chr1x (Mar 02)
- Re: DNS honeypots? Jason Lewis (Mar 02)
- Re: DNS honeypots? Valdis . Kletnieks (Mar 02)
- Re: DNS honeypots? Jason Ross (Mar 02)
- Re: DNS honeypots? Jason Lewis (Mar 02)
- Re: DNS honeypots? Brent Huston (Mar 03)
- Re: DNS honeypots? Jason Lewis (Mar 03)
- Re: DNS honeypots? Brent Huston (Mar 03)
- Re: DNS honeypots? Jason Ross (Mar 03)
- Re: DNS honeypots? Jason Lewis (Mar 03)
- Re: DNS honeypots? Alexandre Dulaunoy (Mar 03)