Honeyd 0.8 not working on RedHat 9

From: Frugal Dude (richmanpoorman20042000_at_yahoo.com)
Date: 07/18/04


Date: 17 Jul 2004 23:17:17 -0700

I am seeing the following message when running honeyd -f honcfg:

Honeyd V0.8b Copyright (c) 2002-2004 Niels Provos
honeyd[7154]: started with -d -f honeyc
Warning: Impossible SI range in Class fingerprint "IBM OS/400 V4R2M0"
Warning: Impossible SI range in Class fingerprint "Microsoft Windows
NT 4.0 SP3"
honeyd[7154]: listening promiscuously on eth0: (arp or ip proto 47 or
(ip )) and not ether src 00:04:76:01:44:0c
honeyc:7: Unknown template "windows"
honeyc:7: Unknown template
honeyc:13: parse error
honeyd: parsing configuration file failed

my config file looks like this:

bind 10.10.0.1 windows

create windows
set windows personality "Microsoft Windows XP Professional SP1"
add windows tcp port 80
add windows tcp port 139 open
add windows tcp port 137 open
add windows udp port 137 open
add windows udp port 135 open
set windows default tcp action reset
set windows default udp action reset

What gives???



Relevant Pages

  • i need script honeyd help, asap!
    ... I am trying run a fake iis web server: ... set windows personality "Windows NT 4.0 Server SP5-SP6" ... add windows tcp port 139 open ...
    (alt.computer.security)
  • Announce: Win32::GUI V1.04
    ... ClassData, GetKeyState, SetWindowPos (Tracker: 1469648). ... Other Features ... including the "standard" windows resources. ... maintained except for this warning. ...
    (comp.lang.perl.misc)
  • Announce: Win32::GUI V1.04
    ... ClassData, GetKeyState, SetWindowPos (Tracker: 1469648). ... Other Features ... including the "standard" windows resources. ... maintained except for this warning. ...
    (comp.lang.perl.modules)
  • Re: Windows XP and IE6 problems
    ... I see the warning above has something to do with Wireless Assistant - I ... 6.Go back to start menu and in all programs go to "windows update" you have ... Event Source: Application Error ... Event Type: Warning ...
    (microsoft.public.windowsxp.general)
  • Re: New Info on IRQ BSOD
    ... What programme is not immediately apparent. ... apparent from file version that Windows XP is not being updated in the ... warning is probably safely ignored. ... aldago wrote: ...
    (microsoft.public.windowsxp.help_and_support)