Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




honeypots logo Honeypots mailing list archives

cannot get Walleye up
From: czhang () bryant edu
Date: Wed, 29 Jun 2005 16:25:58 -0400

Hi,

I am testing a very standard Honeynet setup using the Roo 1.0 CD. I 
have three network interface cards on the HoneyWall and the system is 
setup in a testing LAN on physical boxes.  After some efforts, I have 
most basic functions up and running except the WallEye.  

I tried to narrow down on the problem and this is what I have:

* The httpd for walleye is up and running which can be confirmed from 
the startup messages and "ps -ef"

* The network interface is up and the IP address is set properly, which 
can be confirmed from "ifconfig"

* The network card hardware eth2 is not broken which I have not a 
better way to confirm than switch it to another box to check for the 
time being.  But I did and it worked.

* The "tcpdump -i eth2" is not working as expected.  It should pick up 
all the traffic passing the switch it is connected to but it can only 
pick up the "who-is" messages that are sent from the Honeywall itself 
when I am trying to ping other boxes connected to the same switch.  And 
the remote admin interface is not supposed to enable icmp.  So I cannot 
ping the remote admin interface from other boxes by the design.

* The Walleye obviously is not accessible when I try the following URLs
https://remote-admin-ip
https://remote-admin-ip/walleye.pl

Thanks for any input in advance!


  By Date           By Thread  

Current thread:
  • cannot get Walleye up czhang (Jun 29)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]