Setting up honeyd on winxp sp2
Edmund Dorsey <[email protected]> Mon, 25 Apr 2005 14:33:34 -0400
| Newsgroups | gmane.comp.security.honeypots |
|---|---|
| Message-ID | <[email protected]> |
Hi Everyone,
As part of a school project I have been attempting to set up honeyd
on a windows box. Because the project is for learning purposes only
I've been trying to keep things as simple as possible.
RIght now my network topology looks like this
Cable Modem -------> Hub --------> Router -------> Internal Network
|
|
honeyd Machine
I put the honeyd machine outside the router to try and make it easier
for traffic to get to honeyd (not sure if this was a good idea).
I'm using a simple honeyd.config file provided in the book Honeypot
for Windows. The problem I am having is not so much in configuring
honeyd itself but is in getting traffic to my honeyd machine. I know
honeyd requires it's own virtual address space but I'm not sure how to
set that up in windows or if I even need to.
The config file I'm using sets up one virtual Exchange Server and uses
"bind 10.0.0.1 Exchange Server 2003". I assume then that I need to
create the virtual address 10.0.0.1 on the honeyd machine but I'm not
sure how to go about that.
One I have the virtual address set up I think I need to add a static
route using the "route" command on the honeyd machine so it directs
any relevant incoming traffic to the honeyd machine. Is this correct?
Anyway, I realize these questions are more network related than
honeypot but I haven't been able to find any resources online that
might explain the process in more detail. Thank you for any help you
can provide.
Best Regards,
Ed Dorsey