+--------------+ | Instructions | +--------------+ Requirements ------------ honeyd installed (we tested on honeyd 0.5) arpd installed (we tested on arpd 0.2) java jre installed (we tested on j2sdk1.4.0_03) Usage ----- 1. Use ./make_bundle.sh to build an archive, called "gmhoney.tgz" that contains all the necessary files to setup a simple smtp service emulation. 2. Unpack the archive in a directory where you want the files to reside: tar -zxf gmhoney.tgz 3. Adapt the IP address in config.smtp to the IP address of your honeypot (e.g. 172.16.206.140) and the port number on which you want your service to connect (e.g. port 25). 4. Launch arpd to have your honeypot respond to arp queries for this IP address: arpd 172.16.206.140 5. Launch honeyd to activate the honeypot on this IP address: honeyd -f config.smtp -l honeyd.log 172.16.206.140 If java is not in your path, jou must add the path to the java binary in "service.sh". 6. Try to send a mail to your honeypot using for instance your favorite mail client and verify whether the mail is accepted. You can do this several times and sniff in the mean while the connection to extract the version number that is published by the service in its banner. 7. If the service is not working properly, try running honeyd with the -d option to get more information on what's happening. Have fun. Files ----- The subdirectory contain the different packages of the Java project. Service.java contains the main class. The configuration file, defining the finite state machine that emulates the service, has the default name "gmhoney.xls". Its DTD is in "gmhoney.dtd". Some more background information can be found in "gmhoney.pdf". The role of the other files ("config.smtp", "make_bundle.sh", "service.sh") is described in the file "README". Contact information ------------------- author: Wim Mees email address: Wim.Mees@vision.rma.ac.be [ Address removed. Niels Provos ]