Re: [Labrea-users] new user...
Status: Abandoned
Brought to you by:
lorgor
From: Don M. <dmu...@od...> - 2005-11-10 15:13:05
|
A little rusty ... set this up last year ... Greetings. You really should not attempt to do this without an "exclude" file. The man page describes how to create a configuration file Below is a sample. I want LB to ignore 1 to 100 and 107 to 254. MY.NET.160.1 - MY.NET.160.100 EXC MY.NET.160.107 - MY.NET.160.254 EXC Here is the options line from my OLD starup file. OPTIONS="-v -n MY.NET.160.0/24 -z -s -o -b -p 1000 --bpf-file /etc/labrea/labrea-bpf.conf --init-file /etc/labrea/labrea.conf " - djm - Fact or Fiction? The average time of a new worm being launched that can exploit a newly discovered vulnerability is 5.8 days. (Fact!) ******************************************************** Don Murdoch, CISSP Steven Meyer <meysteven@gmail. com> To Sent by: lab...@li... labrea-users-admi cc n...@li...urcefor ge.net Subject [Labrea-users] new user... 11/10/2005 06:24 AM Hi every one. I am a new user of Labrea, and I find this project really good. I only have a Little problem with the configuration / command line commands. I am just not able to make this thing work! I don't want anything fancy or complicated. I have a ADSL router and 5 computers ( 4 PC & 1 Mac). The computers have pseudo-random static IP Address (192,168.0.15, 192.168.0.47, 192.168.0.112, 192.168.0.189 & 192.168.0.209). I would really want to just know witch command I should type in the command line to create honeypot addresses. I hope that for some one out there it is easy enough, and he could just send me the line command I have to type in. P.S. is this program useful behind a router that dose firewall? would my ZoneAlarm block the program activity? Thanks for all your help. Steven Meyer ------------------------------------------------------- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42" plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php _______________________________________________ Labrea-users mailing list Lab...@li... https://lists.sourceforge.net/lists/listinfo/labrea-users BEGIN-ANTISPAM-VOTING-LINKS ------------------------------------------------------ Teach CanIt if this mail (ID 33990564) is spam: Spam: https://www.spamtrap.odu.edu/b.php?c=s&i=33990564&m=ff30c25a9474 Not spam: https://www.spamtrap.odu.edu/b.php?c=n&i=33990564&m=ff30c25a9474 Forget vote: https://www.spamtrap.odu.edu/b.php?c=f&i=33990564&m=ff30c25a9474 ------------------------------------------------------ END-ANTISPAM-VOTING-LINKS |