| 1 |
On Tue, 2005-10-18 at 23:19 +0000, James wrote: |
| 2 |
> Hello, |
| 3 |
> |
| 4 |
> For a variety of reasons, I need to be able to make an ethernet |
| 5 |
> interface on a gentoo system, change into listen only (stealth mode). |
| 6 |
> Kind of like half duplex, so to speak. Any simple tricks? |
| 7 |
> Just disabling all responses from the ethernet interface would do. |
| 8 |
> I know I can just use 'ifconfig eth0 down' but anything more |
| 9 |
> elegant or that would allow the interface to keep receiving |
| 10 |
> packets for analysis and logging would be better. |
| 11 |
> |
| 12 |
|
| 13 |
I've never used this one, but the idea of a Honeypot is simple and |
| 14 |
sounds like what you are looking for. |
| 15 |
|
| 16 |
emerge -s honey |
| 17 |
Searching... |
| 18 |
[ Results for search key : honey ] |
| 19 |
[ Applications found : 1 ] |
| 20 |
|
| 21 |
* net-analyzer/honeyd [ Masked ] |
| 22 |
Latest version available: 1.0-r1 |
| 23 |
Latest version installed: [ Not Installed ] |
| 24 |
Size of downloaded files: 2,566 kB |
| 25 |
Homepage: http://www.citi.umich.edu/u/provos/honeyd/ |
| 26 |
Description: Honeyd is a small daemon that creates virtual hosts |
| 27 |
on a network |
| 28 |
License: GPL-2 |
| 29 |
|
| 30 |
-- |
| 31 |
Scott Tiret <stiret@××××××××××.net> |
Archives