cannot get Walleye up
[email protected] Wed, 29 Jun 2005 16:25:58 -0400
| Newsgroups | gmane.comp.security.honeypots |
|---|---|
| Message-ID | <[email protected]> |
Hi, I am testing a very standard Honeynet setup using the Roo 1.0 CD. I have three network interface cards on the HoneyWall and the system is setup in a testing LAN on physical boxes. After some efforts, I have most basic functions up and running except the WallEye. I tried to narrow down on the problem and this is what I have: * The httpd for walleye is up and running which can be confirmed from the startup messages and "ps -ef" * The network interface is up and the IP address is set properly, which can be confirmed from "ifconfig" * The network card hardware eth2 is not broken which I have not a better way to confirm than switch it to another box to check for the time being. But I did and it worked. * The "tcpdump -i eth2" is not working as expected. It should pick up all the traffic passing the switch it is connected to but it can only pick up the "who-is" messages that are sent from the Honeywall itself when I am trying to ping other boxes connected to the same switch. And the remote admin interface is not supposed to enable icmp. So I cannot ping the remote admin interface from other boxes by the design. * The Walleye obviously is not accessible when I try the following URLs https://remote-admin-ip https://remote-admin-ip/walleye.pl Thanks for any input in advance!