Honeypots mailing list archives

Setting up honeyd on winxp sp2


From: Edmund Dorsey <edorsey () gmail com>
Date: Mon, 25 Apr 2005 14:33:34 -0400

Hi Everyone,
   As part of a school project I have been attempting to set up honeyd
on a windows box.  Because the project is for learning purposes only
I've been trying to keep things as simple as possible.

RIght now my network topology looks like this

        
Cable Modem -------> Hub --------> Router -------> Internal Network
                                 |
                                 |
                       honeyd Machine

I put the honeyd machine outside the router to try and make it easier
for traffic to get to honeyd (not sure if this was a good idea).

I'm using a simple honeyd.config file provided in the book Honeypot
for Windows.  The problem I am having is not so much in configuring
honeyd itself but is in getting traffic to my honeyd machine.  I know
honeyd requires it's own virtual address space but I'm not sure how to
set that up in windows or if I even need to.

The config file I'm using sets up one virtual Exchange Server and uses
"bind 10.0.0.1 Exchange Server 2003".  I assume then that I need to
create the virtual address 10.0.0.1 on the honeyd machine but I'm not
sure how to go about that.

One I have the virtual address set up I think I need to add a static
route using the "route" command on the honeyd machine so it directs
any relevant incoming traffic to the honeyd machine.  Is this correct?

Anyway, I realize these questions are more network related than
honeypot but I haven't been able to find any resources online that
might explain the process in more detail.  Thank you for any help you
can provide.

Best Regards,

Ed Dorsey


Current thread: