Re: volunteers for sharing honeyd sensor data

Niels,
we do use honeyd and we do collect data from around 30 different places in 
the world, located in 20 different countries. The codename of the project 
is "leurré.com". Anyone is free to join and you, as others, are mostly 
welcome  :-)

Partners get access to the whole set of data collected since the very 
beginning (ie 2 years ago) and this includes all packets sent to or from 
the honeypots. A more user friendly access is, of course, possible through 
a secure graphical interface to query an SQL database.

Due to legal issues, we are unfortunately not in a position to make the DB 
available to people who have not, first, signed a NDA that protects the 
identity of the members.

Feel free to contact me for further info and/or to participate.

You can find all publications related to this project on the following web 
page:
http://www.eurecom.fr/~pouget/papers.htm

I hope this helps,
Marc



At 20:46 16/05/2005, Niels Provos wrote:
>Hi Rajnish,
>
>thanks for offering.  In particular, I am looking for people who
>already run Honeyd and get external traffic to generate statistics
>from.  So, at this point, I am looking for a rather small group of
>people.  However, I will keep this list posted once there is new
>code to be tried out.
>
>Thank you,
>  Niels.
>
>
>On Mon, May 16, 2005 at 03:40:37PM +0530, Rajnish Sharma wrote:
> > Hi Niels
> >    I would sure like to volunteer but am not too sure that i may
> > qualify as my honepot is on the intranet and doesn't have a live IP,
> > it has been given a privat IP address which is not accessible from the
> > WWW domain..
> >   But since i would really like to be a part of it plese let me know
> > if there is any other way that i can be useful
> > Sincerest Regards
> > Rajnish
> >
> > On 5/15/05, Niels Provos <[email protected]> wrote:
> > > Hi everyone,
> > >
> > > I am looking for people who run Honeyd and might be willing to share
> > > their sensor data with the data collector at www.honeyd.org.  I have
> > > some plans to make this feature more useful for anyone, but need to do
> > > some experiments that involve multiple Honeyd installations first.
> > >
> > > If you are interested in participating in this experiment, please send
> > > me email.
> > >
> > > Thanks,
> > >  Niels.
> > >

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Marc Dacier                                     Tel: +33 (0) 4 93 00 29 09
Professor                                       Secr:+33 (0) 4 93 00 26 64
Corporate Communications Department             Fax: +33 (0) 4 93 00 26 27
EURECOM
2229 route des Cretes, BP 193                   E-mail: [email protected]
F-06904 Sophia Antipolis
FRANCE                                  Web: http://www.eurecom.fr/~dacier