honeypots for newbie

[paavan.shah]

hello all!!

I am just a beginner in using honeypots.I have read about honeypots
but never had practical use of them.
Can anyone suggest me any easy to use and install ,basic level honeypot?
I just want to install a basic honeypot system for understanding the
functionalities.


regards,
Pavan Shah

[Dharmendra T]

Hi Paavan,

It all depends on the need for what you want to install the Honeypot.
Like I do install honeypots for  "Getting to know how about the
hackers who will use the vulnerable machines, and what extra stpes I
need to take for securing them. In this case I have to install the
vulnerable system and the monitoring tools for getting the
information"

 I have also read somewhere that some security administrators do also
use the honeypots to drag the attackers (once it has been detected) to
the honeypot system.

I would suggest you first to get to know about the monitoring tools
like tcpdump, snort etc..

Regards,
Dharmendra T.

On 19/12/05, paavan shah <paavan.shah@...> wrote:

> hello all!!
>
> I am just a beginner in using honeypots.I have read about honeypots
> but never had practical use of them.
> Can anyone suggest me any easy to use and install ,basic level honeypot?
> I just want to install a basic honeypot system for understanding the
> functionalities.
>
>
> regards,
> Pavan Shah
>

--
Regards,
Dharmendra T.

[weeznu]

hello

anybody can help me too?

i want to create honeywall using roo honeypot CDROM, so the first step i have to download and install it in my computer. i'm using ubuntu.
and the computer is connected to the network on my campus..

now i have a problem..
i've finished installing my roo honeypot CDROM in my computer..  and then I login for the first time as the default user roo.
but after that i dont know what to do, and how to set it up, so it can work..

does anyone here can help me, how to set up my roo honeypot so it can work??


best regard...

-weeznu-

dharmendra-3 wrote:

Hi Paavan,

It all depends on the need for what you want to install the Honeypot.
Like I do install honeypots for  "Getting to know how about the
hackers who will use the vulnerable machines, and what extra stpes I
need to take for securing them. In this case I have to install the
vulnerable system and the monitoring tools for getting the
information"

 I have also read somewhere that some security administrators do also
use the honeypots to drag the attackers (once it has been detected) to
the honeypot system.

I would suggest you first to get to know about the monitoring tools
like tcpdump, snort etc..

Regards,
Dharmendra T.

On 19/12/05, paavan shah <[e-mail]> wrote:
> hello all!!
>
> I am just a beginner in using honeypots.I have read about honeypots
> but never had practical use of them.
> Can anyone suggest me any easy to use and install ,basic level honeypot?
> I just want to install a basic honeypot system for understanding the
> functionalities.
>
>
> regards,
> Pavan Shah
>


--
Regards,
Dharmendra T.

[Thorsten Holz-2]

On 5/17/07, weeznu <mr.weeznu@...> wrote:

> now i have a problem..
> i've finished installing my roo honeypot CDROM in my computer..  and then I
> login for the first time as the default user roo.
> but after that i dont know what to do, and how to set it up, so it can
> work..

Just do an

$ su -

in order to become root. Then the setup will start and you can
configure your honeywall. If it does not start automatically, just
execute the command 'menu'. For more information, read the manual:
http://honeynet.org/tools/cdrom/roo/manual/5-setup.html

Cheers,
  Thorsten

[weeznu]

yes i've become as root... and I also have executed the command menu...

but unfortunately still I don't know how to configure my honeywall.
i've read the manual at http://honeynet.org/tools/cdrom/roo/manual/5-setup.html,
but I still do not understand how to configure it..

I really need information what command I have to run in the console...

so anybody can tell me step by step to configure it?
coz I really don't know what command I must run...

-best regards-
Weeznu ~just another newbie~

Thorsten Holz-2 wrote:

On 5/17/07, weeznu <[e-mail]> wrote:


Just do an

$ su -

in order to become root. Then the setup will start and you can
configure your honeywall. If it does not start automatically, just
execute the command 'menu'. For more information, read the manual:
http://honeynet.org/tools/cdrom/roo/manual/5-setup.html

Cheers,
  Thorsten

[obichbiche]

Take it easy mate, have a look at an excellent paper written by Faiz Ahmad Shuja from Pakistan Honeynet Project. all the steps are explained with pics and comments.the only difference is that they use a virtual honeynet and you use a real physical one. So use your brain, spot the differences and I'm sure you'll get there.

Here is the link to the paper:
http://www.honeynet.pk/honeywall/index.htm

Good Luck!

Omar Bichbiche
obichbiche@...