BT5中配置简单测试蜜罐

说明：这只是一个简单的测试icmp和tcp,udp包，配置环境为虚拟机中的BT5的IP为192.168.1.105，主机IP为192.168.1.1001.配置的网段为192.168.1.0/24farpd 192.168.1.0/242.配置honeyd.conf文件create windowsset windows personality "Microsoft Wi

forgetive

1177人浏览 · 2012-06-27 14:32:53

forgetive · 2012-06-27 14:32:53 发布

说明：这只是一个简单的测试icmp和tcp,udp包，配置环境为虚拟机中的BT5的IP为192.168.1.105，主机IP为192.168.1.100

1.配置的网段为192.168.1.0/24

farpd 192.168.1.0/24

2.配置honeyd.conf文件

create windows
set windows personality "Microsoft Windows NT 4.0 SP3"
set windows default tcp action reset
set windows default udp action reset
set windows default icmp action open
add windows tcp port 139 open
add windows udp port 137 open
add windows tcp port 137 open
add windows tcp port 110 open
add windows tcp port 80 open
add windows tcp port 25 open
add windows tcp port 22 open
add windows tcp port 21 open
bind 192.168.1.115 windows
bind 192.168.1.114 windows
bind 192.168.1.116 windows

3.创建日志文件

mkdir /var/log/honeyd
touch /var/log/honeyd/service.log
touch /var/log/honeyd/honeyd.log
chmod 777 /var/log/honeyd/*

4.运行honeyd

honeyd -d -p /usr/local/share/honeyd/nmap.prints -l /var/log/honeyd/honeyd.log -s /var/log/honeyd/service.log -f /etc/honeyd.conf 192.168.1.114-192.168.1.116

5.测试