s5 (3)

File Edit View lerminal Tabs Help

root@honeypot honeyd# arpd -d 10.0.0.10-10.0.0.12

arpd[6149]: listening on ethO: arp and (dst net 10.0.0.10/31 or dst net 10.0.0.12/32) and not ether src 00:00:39:af:68:f7 arpd[6149): arpd_lookup: no entry for 10.0.0.10 arpd[6149): arpd_send: who-has 10.O.O.10 tell 10.0.0.2 arpd[6149): arpd_send: who-has 10.O.O.10 tell 10.0.0.2 arpd[6149): arp reply 10.0.0.10 is-at 00:00:39:af:68:f7 arpd[6149): arpd_lookup: no entry for 10.0.0.11 arpd[6149): arpd_send: who-has 10.0.0.11 tell 10.0.0.2 arpd[6149): arpd_send: who-has 10.0.0.11 tell 10.0.0.2 arpd[6149): arp reply 10.0.0.11 is-at 00:00:39:af:68:f7 arpd[6149): arpd_lookup: no entry for 10.0.0.12 arpd[6149): arpd_send: who-has 10.O.O.12 tell 10.0.0.2 arpd[6149): arpd_send: who-has 10.O.O.12 tell 10.0.0.2 arpd[6149): arp reply 10.0.0.12 is-at 00:00:39:af:68:f7 □

:_

File Edit View lerminal Tabs Help

root@honeypot honeyd# honeyd -d -u O -g O -f configi 10.0.0.10-10.0.0.12 Honeyd V0.8b Copyright (c) 2002-2004 Niels Provos

honeyd!6150]: started with -d -u O -g O -f configi 10.0.0.10-10.0.0.12 Warning: Impossible SI rangę in Class fingerprint "IBM 0S/400 V4R2M0"

Warning: Impossible SI rangę in Class fingerprint "Microsoft Windows NT 4.0 SP3"

honeyd!6150]: listening promiscuously on ethO: (arp or ip proto 47 or (ip and (dst net 10.0.0.10/31 or dst net 10.0.0.12/32))) and not ether src 00:00:39:af:68:f7

honeyd!6150]: Demoting process privileges to uid O, gid O honeyd!6150]:    Sending    ICMP    Echo    Reply:    10.0.0.10    ->    10.0.0.1

honeyd!6150]:    Sending    ICMP    Echo    Reply:    10.0.0.10    ->    10.0.0.1

honeyd!6150]:    Sending    ICMP    Echo    Reply:    10.0.0.10    ->    10.0.0.1

honeyd!6150]:    Sending    ICMP    Echo    Reply:    10.0.0.11    ->    10.0.0.1

honeyd!6150]:    Sending    ICMP    Echo    Reply:    10.0.0.11    ->    10.0.0.1

honeyd!6150]:    Sending    ICMP    Echo    Reply:    10.0.0.11    ->    10.0.0.1

□