Honeybrid is a network application built to 1) administrate network of honeypots, and 2) transparently redirect live network sessions (TCP or UDP) from one primary destination host to a secondary destination host.
Be the first to post a text review of Honeybrid. Rate and review a project by clicking thumbs up or thumbs down in the right column.
Three new modules added: - random(proba,<drop|accept>) to let 1 out of "proba" connections in - source(bddX,<drop|accept>) to let only unknown source IP from coming in - proxy(X) to let the connection reaches it's destination without redirection, after X packet New functionalities: - connections are logged in a separate file, which can be automatically rotated every hour - NF_QUEUE is restarted automatically after a crash - the variable MIN_DECISION_DATA in main.c can be set to 0 to send ALL packets to the decision engine (even those with no payload) - the decision engine can now proxy or drop connections instead of redirecting them (decided through the modules) - UDP packets are handled
Honeybrid beta version 0.7, including 3 decision modules: - sha1(): signature-based decision - yesno(): binary-based decision - incpsh(): packet counter-based decision Successfully compiled and tested on Debian Lenny.
Be the first person to add a text review.
Copyright © 2009 Geeknet, Inc. All rights reserved. Terms of Use
Thanks for your rating!
Would you also like to write a review?