RE: Honeypot / Nessus help

["Polazzo Justin" <Justin.Polazzo () facilities gatech edu>]

 You can also use ethereal/winpcap and a front end of Packetyzer to
inject packets from a windows box if you feel so inclined. (all
no-cost-ware)

-JP

P.s.: I have not had a good experience as an end user on the receiving
end of ISS's IPS's (managed by ISS no less), I would discourage
evaluating them as a choice.


-----Original Message-----
From: Robert McMahon [mailto:bob () intoto com]
Sent: Friday, September 24, 2004 2:10 PM
To: honeypots () securityfocus com
Subject: Honeypot / Nessus help

Hi,

I'm trying to evaluate an Intrusion Detection/Prevention product which
advertises support for thousands of signatures.

I'm thinking of using Nessus and a honeypot to exercise the product.
I'm new to the tools/technology and was wondering if anybody has
opinions on if these are the right tools?  Also, should I use honeyd or
some other honeypot?  (My initial look at honeyd suggests it is a bit
premature, but like I said, I'm a newbie.)

Thanks in advance for any help and tips,

Bob McMahon
Application Engineer
Intoto Inc.
bob () intoto com