RE: Honeypot / Nessus help

["Joshua Berry" <jberry () PENSON COM>]

If you are trying to do IDS/IPS, why wouldn't you use Snort or
SnortInline?

-----Original Message-----
From: Robert McMahon [mailto:bob () intoto com] 
Sent: Friday, September 24, 2004 2:10 PM
To: honeypots () securityfocus com
Subject: Honeypot / Nessus help

Hi,

I'm trying to evaluate an Intrusion Detection/Prevention product which
advertises support for thousands of signatures.

I'm thinking of using Nessus and a honeypot to exercise the product.
I'm new to the tools/technology and was wondering if anybody has
opinions
on if these are the right tools?  Also, should I use honeyd or some
other honeypot?  (My initial look at honeyd suggests it is a bit
premature, but like I said, I'm a newbie.)

Thanks in advance for any help and tips,

Bob McMahon
Application Engineer
Intoto Inc.
bob () intoto com