0
I am trying to set the MAC address of one of my honeyd
templates, but keep getting an error message that complaints that that there is no interface that can reach the IP address I want to bind to. This is what I have in my honeyd.conf
file:
route entry 30.0.0.1
route 30.0.0.1 link 30.0.0.0/24
create routerone
set routerone personality "Cisco 7206 running IOS 11.1(24)"
set routerone default tcp action reset
set routerone default icmp action open
add routerone tcp port 23 "/etc/honeypot/scripts/telnet/faketelnet.pl"
create winxp
set winxp personality "Linux Kernel 2.4.20"
#set winxp personality "Microsoft Windows XP Professional SP1"
set winxp default tcp action reset
set winxp default udp action block
set winxp default icmp action open
add winxp tcp port 22 proxy 10.0.0.200:22
add winxp tcp port 23 "/etc/honeypot/scripts/telnet/faketelnet.pl"
add winxp tcp port 24 "sh /etc/honeypot/scripts/hello.sh"
set winxp ethernet "00:11:22:33:44:55"
bind 30.0.0.100 winxp
bind 30.0.0.1 routerone
When trying to run the honeyd
daemon, I get the following error message:
$ honeyd -d -i ens160:1 -f honeyd.conf 30.0.0.0/24
Honeyd V1.5c Copyright (c) 2002-2007 Niels Provos
honeyd[4093]: started with -d -i ens160:1 -f honeyd.conf 30.0.0.0/24
honeyd[4093]: listening promiscuously on ens160:1: (arp or ip proto 47 or (udp and src port 67 and dst port 68) or (ip and (net 30.0.0.0/24))) and not ether src 00:0c:29:40:e7:6a
honeyd[4093]: Demoting process privileges to uid 65534, gid 65534
It works fine when I'm not setting the ethernet address and I can ping it. So, obviously there is an interface that can reach 30.0.0.100. I saw some configurations that are setting a fixed ethernet address in combination with dhcp
, but I need to bind to a static IP address.
Any ideas?
I don't know that product but what isn't actually working? Just by reading that configuration it looks like you are assigning the
winxp
entity the IP 30.0.0.100? – Seth – 2017-01-26T09:29:44.797