s10 (3)

File Edit	View lerminal Tabs	Help
arpd! 6210):	arpd_timeout: expiring	10.0.0.11

arpd_timeout: expiring 10.0.0.12 arpd_lookup: no entry for 10.0.0.10 arpd_send: who-has 10.O.O.10 tell 10.0.0.2 arpd_send: who-has 10.O.O.10 tell 10.0.0.2 arp reply 10.0.0.10 is-at 00:00:39:af:68:f7 arpd_lookup: no entry for 10.0.0.11 arpd_send: who-has 10.0.0.11 tell 10.0.0.2 arpd_send: who-has 10.0.0.11 tell 10.0.0.2 arp reply 10.0.0.11 is-at 00:00:39:af:68:f7

_

File Edit View lerminal Tabs Help

root@honeypot honeyd# honeyd -d -u O -g O -f configi 10.0.0.10-10.0.0.12 Honeyd V0.8b Copyright (c) 2002-2004 Niels Provos

honeyd!6368): started with -d -u O -g O -f configi 10.0.0.10-10.0.0.12 Warning: Impossible SI rangę in Class fingerprint "IBM 0S/400 V4R2M0"

Warning: Impossible SI rangę in Class fingerprint "Microsoft Windows NT 4.0 SP3"

honeyd!6368): listening promiscuously on ethO: (arp or ip proto 47 or (ip and (dst net 10.0.0.10/31 or dst net 10.0.0.12/32))) and not ether src 00:00:39:af:68:f7

honeyd!6368): Demoting process privileges to uid O, gid O

honeyd!6368): Connection request: tcp (10.0.0.1:1051 - 10.0.0.11:22)

honeyd!6368): Connection established: tcp (10.0.0.1:1051 - 10.0.0.11:22) <-> sh /usr/local/share/honeyd/scripts/test.sh 10.0.0.1 22 honeyd!6368): Killing unknown connection: tcp (10.0.0.1:1049 - 10.0.0.11:22) honeyd!6368): Connection closed: tcp (10.0.0.1:1051 - 10.0.0.11:22)