Read Me

/===================================================================\
| SAFER Honeypot: Spoofing Active Fingerprints with Enhance Replies |
| Copyright (C) 2010 Matthew Wilson, Ryan Boersema                  |
|                                                                   |
| E-mail: saferhoneypot@gmail.com                                   |
|                                                                   |
| SAFER Honeypot is currently only compatible with versions of      |
| Nmap greater than or equal to 4.2.                                |
\===================================================================/

##########################
# COMPILING INSTRUCTIONS #
##########################

$ make

######################
# USAGE INSTRUCTIONS #
######################

SAFER Honeypot must be run on an interface in promiscuous
mode. Some Linux distributions, such as Debian,
will properly place the interface into promiscuous
mode as the program is started. However, to ensure
SAFER Honeypot runs correctly, simply place your interface
into promiscuous mode manually with the command below.

# ifconfig eth0 promisc
# ./safer [interface] [IP] [port]

The first command sets your interface into promiscuous
mode. The second command binds SAFER Honeypot to the specified
interface and gives the honeypot an IP address of [IP]
with an open port of [port].

Example:
	# ifconfig eth0 promisc
	# ./safer eth0 192.168.1.100 80

SAFER Honeypot currently only supports specifying a single open port
and a single IP address.

To test SAFER Honeypot's functionality, scan it with Nmap using the
following command on another computer:

$ ping [IP]
# nmap -O [IP]

Where [IP] is the IP address you specified when you
started SAFER Honeypot.