Honeypots: Re: pcap log analysis

["Joe Hickory" <J.Hickory () gmx net>]

hi list, 
 
as there were some more requests for the pcap script i decided to put them
online. 
 
http://zeus.fh-brandenburg.de/~reitenba/index.html 
 
there are also some modified sebek server and web scripts, as i could crash
the 
sebek server unrecoverably and disabling sebek logging completely for all
honeypots 
if i did a cat /etc/timezone on any honeypot. 
 
my other modified sebek-server now logs syslog packets from the honeypots
into 
a database. a small web-interface is included. 
 
did i broke any licence? just tell me. 
 
any questions? just ask. 
 
hope its at least a bit useful to someone. 
 
joe 

-- 
NEU: WLAN-Router für 0,- EUR* - auch für DSL-Wechsler!
GMX DSL = supergünstig & kabellos http://www.gmx.net/de/go/dsl