Did you use a subnet address to specify your honeypots in honeywall?
If so, use the ip address of your honeypot instead when configuring the
honeywall.
Best regards!
lobatt
-----邮件原件-----
发件人: listbounce_at_securityfocus.com [mailto:listbounce_at_securityfocus.com]
代表 mng3_at_libero.it
发送时间: 2006年10月3日 23:46
收件人: honeypot honeypot
主题: Doubt regarding Honeywall
Hi all,
I'm configuring a little honeynet: the Honeywall and one honeypot running
WinXP Pro SP2.
I have deployed the honeynet in my LAN, so the honeypot is in the same
subnet of my production system.
My doubt is the following: the Walleye web interface, in the "Top 10
Honeypots" section show not only honeypot's IP address, but also IP address
of some production systems.
Moreover, when I examine the connection tracked by Honeywall, I see also
connections between system that are NOT the honeypot.
Is this behaviour normal?
The Honeywall are working fine?
thanks
------------------------------------------------------
Salva ora il tuo preventivo Direct Line e assicurati lo sconto extra 5+5%
sulla polizza auto entro il 31 Ottobre!
http://click.libero.it/directline4
Received on Oct 03 2006
Intro
