Honeypots mailing list archives
答复: Doubt regarding Honeywall
From: "lobatt" <lobatt () sohu com>
Date: Wed, 4 Oct 2006 00:49:43 +0800
Did you use a subnet address to specify your honeypots in honeywall? If so, use the ip address of your honeypot instead when configuring the honeywall. Best regards! lobatt -----邮件原件----- 发件人: listbounce () securityfocus com [mailto:listbounce () securityfocus com] 代表 mng3 () libero it 发送时间: 2006年10月3日 23:46 收件人: honeypot honeypot 主题: Doubt regarding Honeywall Hi all, I'm configuring a little honeynet: the Honeywall and one honeypot running WinXP Pro SP2. I have deployed the honeynet in my LAN, so the honeypot is in the same subnet of my production system. My doubt is the following: the Walleye web interface, in the "Top 10 Honeypots" section show not only honeypot's IP address, but also IP address of some production systems. Moreover, when I examine the connection tracked by Honeywall, I see also connections between system that are NOT the honeypot. Is this behaviour normal? The Honeywall are working fine? thanks ------------------------------------------------------ Salva ora il tuo preventivo Direct Line e assicurati lo sconto extra 5+5% sulla polizza auto entro il 31 Ottobre! http://click.libero.it/directline4
Current thread:
- Doubt regarding Honeywall mng3 () libero it (Oct 03)
- 答复: Doubt regarding Honeywall lobatt (Oct 03)
- <Possible follow-ups>
- Re: Doubt regarding Honeywall Earl (Oct 03)