Issue 3 - honeyd - MAc address Link Layer Warning - Project Hosting on Google Code

Issue 3:	MAc address Link Layer Warning	‹ Prev 2 of 14 Next ›
	2 people starred this issue and may be notified of changes.	Back to list

Status:	New
Owner:	----
Type-Defect
Priority-Medium

Reported by jesper.j...@delphinodev.com, Jul 27, 2007

On Aug 01 2005 Niels Provos wrote 

Mac addresses are link-layer mechanism. They only work for machines on the
same network segment. The moment that a router gets in the way, the mac
address is removed. The IP layer does not have MAC addresses.

Honeyd essentially tells you that you are trying to use MAC addresses, but
that there is no ethernet interface for the IP range that you configured. I
suppose I could just make that a warning instead of a failure.

Does this make more sense?

Niels.

For original post.See
http://www.honeyd.org/phpBB2/viewtopic.php?p=971&sid=31e9d6a98779109ffe203825792b6757


Dear Niels.

By having a error when a Mac-address is used on a routed virtual machine
prevents users from using the same Template for non-routed and routed
Virtual Machines.

I see that the condition is still unchanged in the newly released honeyd 1.5c

I have therefore changed the error to a warning in my own WinHoneyd release.

Attached you will find the changed file "parse.c", that I humbly submit for
inclusion in the main code of Honeyd.

parse.c
67.1 KB Download

Comment 1 by netvigilance, Jul 27, 2007

The previous fix and post was made on behalf of

netVigilance, Inc.
makers of Winhoneyd.

http://www.netvigilance.com/winhoneyd

Comment 2 by provos, Jul 31, 2007

Hi, it would be helpful to have the patch against parse.y from which parse.c is being
generated.  Or at least, a patch against patch.c.

Thank you,
 Niels.

Comment 3 by netvigilance, Aug 03, 2007

Hi Niels.

Patch for parse.c attached.

Regards

Jesper Jurcenoks
netVigilance, Inc.
www.netvigilance.com/winhoned

patch.c
1.0 KB Download