Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




honeypots logo Honeypots mailing list archives

openBSD: bad pcap filter
From: Joshua James Donkersloot <jdonker () EE UManitoba CA>
Date: Mon, 19 Jul 2004 10:28:41 -0500

Hi,
        I am not sure if this has been answered before because I am new to this
mailing list.  I am trying to setup honeyd on an openBSD box using
DHCP.  I would like to have honeyd listen to the loopback interface
(lo0).  When I try to launch honeyd on this interface I get an error as
shown in the output below. 

###############   OUTPUT  ######################

noed02# honeyd -i lo0
Honeyd V0.8b Copyright (c) 2002-2004 Niels Provos
honeyd[12299]: started with -i lo0
Warning: Impossible SI range in Class fingerprint "IBM OS/400 V4R2M0"
Jul 18 03:17:41 noed02 honeyd[12299]: started with -i lo0
Warning: Impossible SI range in Class fingerprint "Microsoft Windows NT
4.0 SP3"honeyd: unsupported datalink type
honeyd[12299]: listening on lo0: ip
honeyd: bad pcap filter: unknown data link type 12

##############   END OUTPUT  ####################

        If I launch honeyd on interface de0 (my ethernet card) it seems to
launch correctly.  If anyone knows why i might be getting this bad pcap
filter error or how to correct it please let me know.  Any help would be
greatly appreciated.

Thank-you,

              Josh



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]