Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




honeypots logo Honeypots mailing list archives

honeyd and openbsd 3.2
From: David Jobes <djobes () xscanners org>
Date: 27 Oct 2002 09:39:20 +0000

im having problems gettign honeyd to work it seems. the program launches
and runs, but when i attempt to connect to and test some exploits, im
not getting any log information or display on the screen. here are the
commands im running, and a copy of my config file:

# ./honeyd -d -p nmap.prints -f honey.conf 192.168.1.0/24
honeyd[10818]: listening on de0: (tcp or icmp or udp) and dst net
192.168.1.0/24 and not ether src 00:10:83:18:ec:2b


honey.conf:

annotate "MS Windows2000 Professional RC1/W2K Advance Server Beta3"
fragment old
create template
set template personality "MS Windows2000 Professional RC1/W2K Advance
Server Beta3"
add template tcp port 22  proxy $ipsrc:22
add template tcp port 23  "sh scripts/router-telnet.sh"
add template tcp port 137 open
add template udp port 139 open
add template tcp port 445 open
add template tcp port 80 "/usr/bin/perl iis/iisemul8.pl"
add template tcp port 8080 "/usr/bin/perl iis/iisemul8.pl"
add template tcp port 443 open
add template tcp port 111 open
add template tcp port 1035 open
add template udp port 7 open
set template uid 32767 gid 32767

bind 192.168.2.32 template
set 192.168.2.32 uptime 1327650

pf.conf
rdr on de0 proto tcp from any to de0/32 port 80 -> 192.168.1.32 port 80


so im passing and rdr all traffic on the above ports to the correct ip,
that i have bound in the honey.conf file. but im not info to stdout or
/var/log/messages or daemon

what have i missed

TIA
-- 

=============================================
David Jobes - CISSP
email: djobes () xscanners org
web: http://www.xscanners.org
aimid: davidjobestx


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]