Release Details
|
Fields |
Details |
|---|---|
|
Name |
Honeyd |
|
Version |
5.0.0 |
|
Supported On |
LogPoint v6.0.0 and later |
|
Release Date |
2020-05-14 |
| Document Date | 2020-05-14 |
| Download | Honeyd_5.0.0.pak |
| SHA256 |
ea5a503dc7f42fdb7f79cc1e19f81854388fab9e89b136e979aae659c92e98c0 |
Package Details
The application consist of the following component:
- Normalization Package
- LP_Honeyd
Enhancement
A minor update has been done in the application’s normalizer for better signature handling.
General Description
The Honeyd application normalizes Honeyd events and enables you to analyze Honeyd data. You can further customize the searches to perform in-depth analysis.
Installation
Follow these steps to install the Honeyd v5.0.0 plugin:
- Download the Honeyd package from the Download section above.
- Add the required Honeyd server as a device in LogPoint.
- Create a collection policy with the Syslog collector and appropriate processing policy.
- Assign the policy to the device.
Supported Device
The supported device of Honeyd with LogPoint in this configuration is:
- Honeyd v1.5
Log Format
Honeyd
Log Sample
Nov 22 13:40:00 complab7-14 honeyd[5695]: listening promiscuously on eth0: (arp or ip proto 47 or (udp and src port 67 and dst port 68) or (ip )) and not ether src 0:1:1:4:b:6
To export data to LogPoint use Syslog collector on port 514 on the LogPoint server.
Support
If you have any queries or require assistance, please feel free to contact our support team:
Email: servicedesk@logpoint.com
Phone: +45 7060 6100
Best regards,
Comments
Article is closed for comments.