Setting up the HoneyBOT HoneyPot

HoneyPots are hosts meant to be attacked either to distract the attackers or to research their techniques. This video will cover setting up a simple HoneyPot in Windows using an application called HoneyBOT. I'll also talk a little about capturing a pcap file with dumpcap for later analysis.

 

Youtube (which for some reason is gray for the first few sec):

Blip.tv:

To download, right click the link below:
http://blip.tv/file/get/Irongeek-honeybot277.mp4 

Links:
http://en.wikipedia.org/wiki/Honeypot_%28computing%29
http://www.atomicsoftwaresolutions.com/honeybot.php

Command notes:
dumpcap -D
dumpcap -i \Device\NPF_{E4592A70-5A44-401A-BD0F-E0A2677AEF0A} -w delme.pcap -f "not broadcast and not multicast"

 

Printable version of this article