Honeypots: Re: binding sub-interfaces in Linux

[Chris <list.traffic () frys com>]

I added the -i eth0:1 to the command line and here's the output. If I  
start without the -i eth0:1 and bind 10.0.1.53 eth0:1 it starts ok. I have  
also tried starting with -i eth0 and both -i eth0 -i eth0:1 and -i  
eth0,eth0:1 with simular results.
Honeyd V1.0 Copyright (c) 2002-2004 Niels Provos
honeyd[2193]: started with -f /etc/honeyd.conf -i eth0:1
Warning: Impossible SI range in Class fingerprint "IBM OS/400 V4R2M0"
Warning: Impossible SI range in Class fingerprint "Microsoft Windows NT  
4.0 SP3"
honeyd[2193]: listening promiscuously on eth0:1: (arp or ip proto 47 or  
(udp and src port 67 and dst port 68) or (ip )) and not ether src  
00:20:78:17:34:8d
honeyd[2193]: HTTP server listening on port 80
honeyd[2193]: HTTP server root at /usr/local/share/honeyd/webserver/htdocs
/etc/honeyd.conf:107: Interface "eth0" does not exist.
/etc/honeyd.conf:107: syntax error
honeyd: parsing configuration file failed



/sbin/ifconfig -a
eth0      Link encap:Ethernet  HWaddr 00:20:78:17:34:8D
          inet addr:66.152.98.108 Bcast:66.152.98.108  Mask:255.255.255.0
          inet6 addr: fe80::220:78ff:fe17:348d/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1028 errors:0 dropped:0 overruns:0 frame:0
          TX packets:677 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:93082 (90.9 Kb)  TX bytes:91709 (89.5 Kb)
          Interrupt:185 Base address:0x9000

eth0:1    Link encap:Ethernet  HWaddr 00:20:78:17:34:8D
          inet addr:10.0.1.49  Bcast:10.0.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1028 errors:0 dropped:0 overruns:0 frame:0
          TX packets:678 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:93082 (90.9 Kb)  TX bytes:91871 (89.7 Kb)
          Interrupt:185 Base address:0x9000
...

Thanks again

On Tue, 18 Jan 2005 08:24:28 +0100, Hauguet, Francis  
<francis.hauguet () eads com> wrote:
> Chris wrote:
> > I added a  sub-interface to my honeyd host and added the bind 10.1.1.53  
> > to eth0:1  statement to the honeyd.conf file it won't start.
> Have you added -i eth0:1 on the honeyd command line ?
>
> regards,


--
Using Opera's revolutionary e-mail client: http://www.opera.com/m2/