Honeypots mailing list archives

Re: honeyd logging


From: "JAMIE CRAWFORD" <crawford () cmsu1 cmsu edu>
Date: Sun, 06 Jun 2004 21:30:30 -0500

Yes I've started arpd before honeyd.  Honeyd is working great except I
cant get the -l option to work. If I daemonize all the connections and
sessions are sent to the console where I can read them, but I want to
logg everything to a log file without having to do the >> log.log
routine.
tia,
jamie


Vanmunin Chea <vac () cse unsw edu au> 06/06/04 08:29PM >>>
Hello Jamie,

Have you started your arpd before hondeyd ?
I think you should otherwise it will not work.

Also you might want to have a look at /etc/log dir
something might end up in there.

Hope that help, :-)
Have Fun,
Van.


On Sun, Jun 06, 2004 at 07:54:09PM -0500, JAMIE CRAWFORD wrote:
Hello,

I'm having trouble getting honeyd to output any logs. 

Running as root I run:

honeyd -p nmap.prints -f config.honeyd -l log.log 10.1.1.1-10.1.1.10

I've also created the file log.log hoping that was the issue. No
data
output at all. I've also tried the -s option and it didn't work
either.
I know I should be getting something, I've port scanned these ip's
with
nmap ten times, so something should show up. If I dont daemonize, I
see
all the output on the screen, but nothing goes to the logfile.


Sorry for all the problems. TIA :)

jamie




Current thread: