RE: KFSENSOR
"Joshua Berry" <[email protected]>
| Newsgroups | gmane.comp.security.honeypots |
|---|---|
| Message-ID | <[email protected]> |
IDS generally only detect malicious or out of the ordinary activity. Honeypots will log whatever connections come to that box, not just malicious traffic. A honeypot usually doesn't have the logic to only detect malicious stuff, that is the job of an IDS. -----Original Message----- From: [email protected] [mailto:[email protected]] Sent: Thursday, March 17, 2005 6:42 AM To: [email protected] Subject: KFSENSOR hey people, i just downloaded kfsensor and it has received a lot of activity but half of them are not malicious. for eg. connections being made by NIS. is KFsensor more of an intrusion detection system then a honeypot? how does it act like a honeypot? shouldnt it just detect malicious activity? thanks a lot for any feedback...