Re: Portable honey port

[Chris Benedict <chrisbdaemon () gmail com>]

Thanks for all the input.  A friend off-list recommended BearTrap as its
designed to trap the big scary attackers and I went with that.  No offense but
I wasn't too excited about naming my first released project after a type of
toilet :P lol.

Anyway, code is on GitHub.. https://github.com/chrisbdaemon/BearTrap

It is of course in beta, just barely.  More features are still to come and
expect some bugs.  If you do find a bug though let me know and I'll try to fix
it.

One more note, it doesn't work on OpenBSD yet.  OpenBSD throws an exception
about the UDP alert with the signature attached being too long (udp data
payloads of something around 1472 bytes made it complain in my OpenBSD 4.2 VM).
I need to work on a safe method to fragment the alert up without opening a huge
problem with resource exhaustion.

-Chris Benedict

On Oct 24, 2011, at 9:51 AM, Jesse Gardner wrote:

> HoneyBucket  ...?
>
> On Mon, 24 Oct 2011 08:40:08 -0600 Owen Connolly 
> <ojconnolly () gmail com> wrote:
> > Have we had PottyMouth or for the left field entry... Starboard!
> >
> > Owen Connolly
> >
> > On 24 Oct 2011, at 15:06, John Strand <strandjs () gmail com> wrote:
> >
> > > I am changing mine to PortaPotty.
> > >
> > >
> > >
> > > On Sat, Oct 22, 2011 at 9:52 AM, Joshua Smith 
> > <lazydj98 () gmail com> wrote:
> > > PortaPotty ++2
> > > Pooh ++1
> > >
> > > -Josh
> > > _______________________________________________
> > > Pauldotcom mailing list
> > > Pauldotcom () mail pauldotcom com
> > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > Main Web Site: http://pauldotcom.com
> > >
> > >
> > >
> > > -- 
> > > John Strand
> > > Office: (605) 550-0742
> > > Cell: (303) 710-1171
> > >
> > > _______________________________________________
> > > Pauldotcom mailing list
> > > Pauldotcom () mail pauldotcom com
> > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > Main Web Site: http://pauldotcom.com
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom () mail pauldotcom com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com

_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com