Honeypots: RE: setting up a Honeypot

["Beauford, Jason" <jbeauford () EightInOnePet com>]

Have you swung by:  http://project.honeynet.org/

And don't forget about SANS.org http://www.sans.org/rr/

I apologize for not being specific, but I am sure you will find most of
what you need to start at these two sites.

Kind Regards,

JMB

-----Original Message-----
From: bgenefort () reytan fr [mailto:bgenefort () reytan fr] 
Sent: Tuesday, February 01, 2005 5:47 AM
To: honeypots () securityfocus com
Subject: setting up a Honeypot


Hi everybody,

I'm just beginning to work on Honeypots as a year-graduating project. I
have 3 computers dedicated to this work : one for Linux honeypot, one
for Windows honeypot, and one to centralize data. I'm reading
documentations for days, but I never found the exemple of someone using
this network topology, although tips to manage both Windows/Linux
honeypots data would be very helpful. Has anyone set this up yet ? What
kind of data management software can be used to read both data flows ?

I'm also sending this mail to say that I will be working on this for the
next 6 months, and I would like my work to help the community. So feel
free to give me advice so that my work would not be redundant and
useless for all. Thanks in advance for any answer

     bgenefort