Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




honeypots logo Honeypots mailing list archives

Honeynet Alliance Charter Question
From: Adam Carlson <ajcarlson () ucdavis edu>
Date: Tue, 15 Mar 2005 12:43:00 -0800

Greetings all,
I was wondering if someone could explain to me the meaning and purpose of the honeynet alliance requirement 4.8 involving data capture.

From this page:

http://www.honeynet.org/alliance/charter.txt

"4.8  Organizations that deploy honeynets and related technologies for
    data capture must use passive means.  No active means of data
    capture are acceptable under the Alliance.  "

What types of activity would be considered "passive" data capture as opposed to "active". I see how tcpdump would be considered passive, while something like nmap would be considered active, but is there a more formal definition/description that could be used to help classify data capture methods when they aren't so obvious? Having a better understanding of the intent of this requirement might help me understand how to interpret it as well. Please let me know any thoughts you might have. Thank you for any assistance, -Adam


--
Clatto Verata Nicto


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]