Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 28 Nov 2001 18:05:47 -0500
From:      "Ron Hensley" <ronh@intercom.net>
To:        "Anthony Atkielski" <anthony@freebie.atkielski.com>, "Bsd Neophyte" <bsdneophyte@yahoo.com>, <freebsd-questions@FreeBSD.ORG>
Subject:   Re: script-kiddie trap?
Message-ID:  <012701c17861$3dfb6150$0273150a@woodstock.lanalyse.com>
References:  <20011128223859.30465.qmail@web20103.mail.yahoo.com> <013a01c1785e$f206b7b0$0a00000a@atkielski.com>

next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Actually the software _can_ be special, as in logind, telnetd, sshd, tcsh,
sh, etc having the source modified
to do extreme logging, invisibly, as well as to trip alarm bells and the
like.

Anyways, here's a link (search google on hoenypoot, first hit)
http://www.enteract.com/~lspitz/honeypot.html
that lists commercial as well as homebrew honeypot solutions

> Perhaps you're thinking about "honeypots," real systems operated normally
but
> closely monitored with the specific purpose of inviting attention from
script
> kiddies and other dregs.  There isn't anything special about the software
they
> run; they are just very closely watched by the honeypot operators.  But
what
> would be the utility of such a system for you?  They don't keep crackers
> out--quite the contrary.
>
> > The false network was pretty convincing.  While the intruder would poke
> > around and cause mayhem, this tool would log everything about the person
> > so that you could file a pretty convincing case against them.
> >

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>;

iQA/AwUBPAVtylFb04N5DzUjEQIz9ACg7AGgIc1s5IzpQvuM0YCXWLUzhAkAnjQz
skxKQlOPhpl6EMznKo/M4wWA
=n5xT
-----END PGP SIGNATURE-----



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?012701c17861$3dfb6150$0273150a>