Re: honeyd: Connection refused

Thorsten Holz <[email protected]> Wed, 10 Aug 2005 22:11:07 +0200

Newsgroups	gmane.comp.security.honeypots
Message-ID	<[email protected]>

Tobias Hahn wrote:

> $ ping 1.2.3.4
> honeyd[]: Sending ICMP Echo Reply: 1.2.3.4 -> 5.6.7.8
> Seems to be working, although I get 2 ICMP Echo replies from the honeypot's
> IP.

But if you get 2 ICMP Echo replies, that indicates an error. It seems 
that the TCP/IP stack of your OS also replies to the requests...

How do you route traffic to your honeyd? Or are there other machines in 
your network that could reply to the address you tried to ping?

Cheers,
   Thorsten