Honeypots mailing list archives
honeyd on Solaris 9
From: Tobias Hahn <tobi_wan () gmx de>
Date: Fri, 01 Jul 2005 08:28:33 +0200
Hi,
I started debugging honeyd wit gdb and I think I found at least one
reason why it's not working like I want it to. I compared the Solaris
debugging output with the Suse 9.2 debugging output and this is what I got:
===SuseLinux9.2=========>>>>=========================
3106 interface_initialize(honeyd_recv_cb);
(gdb) step
interface_initialize (cb=0x81a64c0) at interface.c:83
83 TAILQ_INIT(&interfaces);
(gdb)
85 if ((intf = intf_open()) == NULL)
(gdb)
intf_open () at intf.c:123
123 if ((intf = calloc(1, sizeof(*intf))) != NULL) {
(gdb)
124 intf->fd = intf->fd6 = -1;
(gdb)
126 if ((intf->fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0)
(gdb)
137 return (intf);
========================<<<<=========================
===Solaris9=============>>>>=========================
3109 interface_initialize(honeyd_recv_cb);
(gdb)
interface_initialize (cb=0x1ef8c <honeyd_recv_cb>) at interface.c:83
83 TAILQ_INIT(&interfaces);
(gdb)
85 if ((intf = intf_open()) == NULL)
(gdb)
86 err(1, "intf_open");
(gdb)
85 if ((intf = intf_open()) == NULL)
(gdb)
88 if_recv_cb = cb;
(gdb)
========================<<<<=========================
It seems to me that on Solaris there is a problem with opening the
interface. intf_open() belongs to intf.c, which is one of the libdnet
files.
honeyd always ends just after
3205:fprintf(stderr, "Honeyd starting as background process\n");
3206: if (daemon(1, 0) < 0) {
3207: unlink(PIDFILE);
3208: err(1, "daemon");
3209: }
line 3206 is the last one the gdb shows.
I would really appreciate if somebody could help me with any of this.
Thanks in advance,
Tobias
Current thread:
- honeyd on Solaris 9 Tobias Hahn (Jul 01)
- <Possible follow-ups>
- Re: honeyd on Solaris 9 gangadhar npk (Jul 03)
- Re: honeyd on Solaris 9 Tobias Hahn (Jul 07)
