[wplug] howto advertise all ports as open

Eric C. Cooper ecc at cmu.edu
Sat Mar 29 16:21:28 EST 2003


On Sat, Mar 29, 2003 at 04:02:36PM -0500, Alexandros Papadopoulos wrote:
> I've come across the idea of having a machine overwhelm an attacker by 
> presenting *all* ports as listening/open.

This is known as a honeypot.

> Does anyone know of such a module?

A quick google turned up honeyd (http://www.citi.umich.edu/u/provos/honeyd/)
and Tiny Honeypot (http://www.alpinista.org/thp/), for starters.

-- 
Eric C. Cooper          e c c @ c m u . e d u



More information about the wplug mailing list