Honeyd

From aldeid
Jump to: navigation, search
Draft.png
DRAFT
This page is still a draft. Thank you for your understanding.

Description

Honeyd is a small daemon that runs both on UNIX-like and Windows platforms. It is used to create multiple virtual honeypots on a single machine. Entire networks can be simulated using honeyd. Honeyd can be configured to run a range of services like FTP, HTTP, or SMTP. Furthermore, a personality can be configured to simulate a certain operating system. Honeyd allows a single host to claim as many as 65536 IP addresses.

Honeyd is preinstalled on REMnux.

Installation

Tested environment

The following has been tested on a Debian 7 virtual machine.

Prerequisites

Honeyd depends on following libraries:

$ sudo aptitude install libevent-dev libdnet-dev libpcap0.8-dev libpcre3-dev libdumbnet-dev \
  libedit-dev zlib1g-dev libc6-dev

Installation of honeyd

$ cd /data/src/
$ wget http://www.honeyd.org/uploads/honeyd-1.5c.tar.gz
$ tar xzvf honeyd-1.5c.tar.gz

I had an issue while compiling (./configure) because libc.so was not found. The fix is described here.

$ wget https://dl.dropboxusercontent.com/u/10761700/honeyd-1.5c.patch
$ patch -p0 < honeyd-1.5c.patch
$ sudo aptitude install autoconf libtool
$ cd honey-1.5c/
$ autoreconf -fi

Once the patch applied, you can proceed with the compilation and the installation:

$ ./configure
$ make
$ sudo make install