Honeypots mailing list archives
Setting up honeyd on winxp sp2
From: Edmund Dorsey <edorsey () gmail com>
Date: Mon, 25 Apr 2005 14:33:34 -0400
Hi Everyone, As part of a school project I have been attempting to set up honeyd on a windows box. Because the project is for learning purposes only I've been trying to keep things as simple as possible. RIght now my network topology looks like this Cable Modem -------> Hub --------> Router -------> Internal Network | | honeyd Machine I put the honeyd machine outside the router to try and make it easier for traffic to get to honeyd (not sure if this was a good idea). I'm using a simple honeyd.config file provided in the book Honeypot for Windows. The problem I am having is not so much in configuring honeyd itself but is in getting traffic to my honeyd machine. I know honeyd requires it's own virtual address space but I'm not sure how to set that up in windows or if I even need to. The config file I'm using sets up one virtual Exchange Server and uses "bind 10.0.0.1 Exchange Server 2003". I assume then that I need to create the virtual address 10.0.0.1 on the honeyd machine but I'm not sure how to go about that. One I have the virtual address set up I think I need to add a static route using the "route" command on the honeyd machine so it directs any relevant incoming traffic to the honeyd machine. Is this correct? Anyway, I realize these questions are more network related than honeypot but I haven't been able to find any resources online that might explain the process in more detail. Thank you for any help you can provide. Best Regards, Ed Dorsey
Current thread:
- Setting up honeyd on winxp sp2 Edmund Dorsey (Apr 27)
- Re: Setting up honeyd on winxp sp2 Jan Reister (Apr 27)
- <Possible follow-ups>
- RE: Setting up honeyd on winxp sp2 Roger A. Grimes (Apr 27)
- RE: Setting up honeyd on winxp sp2 Michael A. Davis (Apr 27)
- Re: Setting up honeyd on winxp sp2 Niels Provos (Apr 27)
- RE: Setting up honeyd on winxp sp2 Gentile, Rob (Apr 27)
- RE: Setting up honeyd on winxp sp2 Roger A. Grimes (Apr 27)