Re: DNS honeypots?

[Jason Ross <algorythm () gmail com>]

On Wed, Mar 3, 2010 at 9:55 AM, Brent Huston <lbhlists () gmail com> wrote:
> Likely nothing today, most malware isn't smart enough to figure that out.
>
> On Mar 3, 2010, at 10:38 AM, Jason Lewis wrote:
>
> > Slightly related, I was wondering what might happen if I made every
> > query to the honeypot resolve back to the honeypot?


But it would have the advantage of allowing you to capture further
traffic for analysis through whatever tools you choose.

--
jason