ping tunnel
Sponsored Links
Sponsored Links
Secleted [ 0 ] software to compare
Results 1 - 15 of about 348
Sleep Dummy Shell for liunx 0.0.2
Simple login shell substitute for Linux or Unix more>> This is a simple do-nothing, sleep-forever program that can be used as a login shell (in Linux or Unix) to keep the connection open but without interactive shell. We use it to create SSH accounts for users who will only use them for SSH-tunneling; to create an encrypted tunnel to our servers (for example to connect securely to database servers like mySQL, PostgreSQL, etc).
Most restricted shells still allow execution of local commands from the SSH account. Setting the account shell to something like /bin/false (or any other simple programs) usually wont work because the tunnel is closed as soon as the program finish its execution. Sleep Dummy Shell just sleeps until its execution is terminated by the user or the tunnel is closed.
The Sleep Dummy Shell is the perfect solution for extranet, intranet and public hosting providers who wish to provide their customers with SSH accounts for encripted tunneling, without worrying about extra security.
Compiled, no scripting runtime needed.
For Linux and other Unix.
Minimal memory and CPU time usage.
Simple to install.
Open source. Released under the GPL license.<<less
Download (13KB)
Added: 2009-04-15 License: Freeware Price:
191 downloads
5Loaves 1.0
An open source, cross platform, secure, internet tunneling platform more>> An open source, cross platform, secure, internet tunneling platform with file transfer, web server, remote admin, proxy, and load balancing. Enables connections through or around firewalls and across sub-networks.<<less
Download (1.72MB)
Added: 2009-04-06 License: Freeware Price: Free
200 downloads
XtekRouter Free 1.0
XtekRouter Free is the perfect solution to create a linux router. more>> XtekRouter Free is the perfect solution to create a linux router for your home or small office network.
* Extremeply Reliable
* High-Performance
* Easy to Install
* Multi-user
* Easy Web Interface
You can:
* Control your network using XtekRouter web interface
* Add/Remove access accounts
* Add/Remove network clients
* Port forward
* Traceroute
* Ping
* Export database
This version is limited to 10 clients.<<less
Download (10.6KB)
Added: 2009-04-03 License: Freeware Price: Free
203 downloads
PING 1.10 / 2.00 RC7
PING is a live Linux ISO, based on the excellent RIP (Recovery Is Possible) distribution. more>>
PING is a live Linux ISO, based on the excellent RIP (Recovery Is Possible) distribution. PING can be burnt on a CD and booted, or integrated in a PXE / RIS environment.
Several tools have been added and written, so to make this ISO the perfect choice to backup and restore whole partitions, an easy way. It sounds like Symantec Ghost(tm), but has even better features, and is totally free.
Main features:
- Backup and Restore partitions or files to a MS Network Shared directory;
- Backup and Restore the BIOS data as well;
- Either burn a bootable CD / DVD, either integrate within a PXE / RIS environment;
- Possibility to Blank local admins password;
- Create your own restoration bootable DVD (see the Howto Documentation);
- Partition and Format a disk before installing Windows (so to make sure your unattended Windows installation will happen on the right partition);
Specific advantages Linux brings you over DOS and Ghost :
- Most network cards automatically recognized by the Kernel (unlike DOS);
- Most CD/DVD readers automatically recognized by the Kernel (unlike DOS);
- You dont have to run a Ghostcast server to receive images over the network.
Whats New in 2.00 RC7 Development Release:
- NTFS filesystems were not being resized to the maximum size that the partition could contain, though logging reported such.
- An occasional hang on some systems when it came to mount NTFS partitions was fixed.
- For an unknown reason, using NTFS-3G drivers rather than native kernel drivers seems to resolve the issue.
- The kernel was updated to Linux 2.6.22.4.
- Some more network and S-ATA/SCSI drivers have been compiled.
<<lessSeveral tools have been added and written, so to make this ISO the perfect choice to backup and restore whole partitions, an easy way. It sounds like Symantec Ghost(tm), but has even better features, and is totally free.
Main features:
- Backup and Restore partitions or files to a MS Network Shared directory;
- Backup and Restore the BIOS data as well;
- Either burn a bootable CD / DVD, either integrate within a PXE / RIS environment;
- Possibility to Blank local admins password;
- Create your own restoration bootable DVD (see the Howto Documentation);
- Partition and Format a disk before installing Windows (so to make sure your unattended Windows installation will happen on the right partition);
Specific advantages Linux brings you over DOS and Ghost :
- Most network cards automatically recognized by the Kernel (unlike DOS);
- Most CD/DVD readers automatically recognized by the Kernel (unlike DOS);
- You dont have to run a Ghostcast server to receive images over the network.
Whats New in 2.00 RC7 Development Release:
- NTFS filesystems were not being resized to the maximum size that the partition could contain, though logging reported such.
- An occasional hang on some systems when it came to mount NTFS partitions was fixed.
- For an unknown reason, using NTFS-3G drivers rather than native kernel drivers seems to resolve the issue.
- The kernel was updated to Linux 2.6.22.4.
- Some more network and S-ATA/SCSI drivers have been compiled.
Download (31.8MB)
Added: 2007-08-24 License: GPL (GNU General Public License) Price:
518 downloads
HTTPTunnel 0.9.4
HTTPTunnel is a simple client/server application for creating an HTTP tunnel between two machines, optionally via a Web proxy. more>>
HTTPTunnel is a simple client/server application for creating an HTTP tunnel between two machines, optionally via a Web proxy.
This is a small application for tunnelling an arbitrary TCP socket connection over HTTP. It can be used, for example, to tunnel traffic out from behind a restrictive firewall that only allows outgoing HTTP web connections.
The basic idea is that you run an instance of the HTTP Tunnel application locally in client mode, that then connects out to another instance that you run at the remote end of the tunnel in server mode.
You then connect to the local client end of the tunnel with the application whose traffic you wish to tunnel, and all communications are then wrapped in HTTP. The tunnel may also go via a HTTP proxy, either explicitly or transparently.
Enhancements:
- This release includes some major bugfixes and improvements in the tunneling error detection and retransmission code.
- It also introduces support for building and running under Cygwin.
<<lessThis is a small application for tunnelling an arbitrary TCP socket connection over HTTP. It can be used, for example, to tunnel traffic out from behind a restrictive firewall that only allows outgoing HTTP web connections.
The basic idea is that you run an instance of the HTTP Tunnel application locally in client mode, that then connects out to another instance that you run at the remote end of the tunnel in server mode.
You then connect to the local client end of the tunnel with the application whose traffic you wish to tunnel, and all communications are then wrapped in HTTP. The tunnel may also go via a HTTP proxy, either explicitly or transparently.
Enhancements:
- This release includes some major bugfixes and improvements in the tunneling error detection and retransmission code.
- It also introduces support for building and running under Cygwin.
Download (0.059MB)
Added: 2007-08-19 License: GPL (GNU General Public License) Price:
807 downloads
GNU FreeIPMI 0.4.3
GNU FreeIPMI project provides Remote-Console (out-of-band) and System Management Software. more>>
GNU FreeIPMI project provides "Remote-Console" (out-of-band) and "System Management Software" (in-band) based on IPMI v1.5/2.0 specification.
This project includes:
- KCS, SMIC, SSIF, LAN Drivers and C Library (libfreeipmi)
- IPMI Locate - Probe IPMI BMC Device (ipmi-locate)
- FreeIPMI SHell (fish)
- Watchdog Daemon (bmc-watchdog)
- Sensors (sensors)
- System Event Log (sel)
- BMC Info (bmc-info)
- BMC Config (bmc-config)
- IPMI Power (ipmipower)
- IPMI Ping (ipmiping)
- RMCP Ping (rmcpping)
- Gratuitous ARP Daemon (garpd)
- IPMI Raw Interface (ipmi-raw)
<<lessThis project includes:
- KCS, SMIC, SSIF, LAN Drivers and C Library (libfreeipmi)
- IPMI Locate - Probe IPMI BMC Device (ipmi-locate)
- FreeIPMI SHell (fish)
- Watchdog Daemon (bmc-watchdog)
- Sensors (sensors)
- System Event Log (sel)
- BMC Info (bmc-info)
- BMC Config (bmc-config)
- IPMI Power (ipmipower)
- IPMI Ping (ipmiping)
- RMCP Ping (rmcpping)
- Gratuitous ARP Daemon (garpd)
- IPMI Raw Interface (ipmi-raw)
Download (MB)
Added: 2007-08-15 License: GPL (GNU General Public License) Price:
807 downloads
PingBlog 0.2
PingBlog is a tag generator and ping tool for blog directories such as Blogalaxia, VeneBlogs, Technorati, To2Blogs and others. more>>
PingBlog is a tag generator and ping tool for blog directories such as Blogalaxia, VeneBlogs, Technorati, To2Blogs and others.
<<less Download (MB)
Added: 2007-08-09 License: GPL (GNU General Public License) Price:
806 downloads
Enhanced TightVNC Viewer 1.0.18
Enhanced TightVNC Viewer package is a project to add some patches to the long neglected Unix TightVNC Viewer. more>>
Enhanced TightVNC Viewer package is a project to add some patches to the long neglected Unix TightVNC Viewer. Enhanced TightVNC Viewer also adds a GUI for Windows and Unix that automatically starts up a STUNNEL SSL tunnel for SSL connections to x11vnc (or any other VNC Server also running an SSL tunnel, such as STUNNEL, at their end), and then launches the TightVNC Viewer. The program can also be used set up SSH tunnelled connections instead.
Main features:
- SSL support for connections using the co-bundled stunnel program.
- Automatic SSH connections from the GUI (system ssh is used on Unix; co-bundled plink is used on Windows)
- rfbNewFBSize VNC support on Unix (screen resizing)
- cursor alphablending with x11vnc at 32bpp (-alpha option)
- xgrabserver support for fullscreen mode, for old window managers (-grab option).
The Viewer SSL support is done via a wrapper script (bin/ssl_tightvncviewer) that starts up the STUNNEL tunnel first and then starts the TightVNC viewer pointed at that tunnel. The bin/ssl_vnc_gui program is a GUI front-end to that script. See this FAQ for more details on SSL tunnelling.
The rfbNewFBSize support allows the enhanced TightVNC Unix viewer to resize when the server does (e.g. "x11vnc -R scale=3/4" remote control command).
Enhancements:
- The Unix VNC Viewer now supports UltraVNC file transfer via an auxiliary Java program.
<<lessMain features:
- SSL support for connections using the co-bundled stunnel program.
- Automatic SSH connections from the GUI (system ssh is used on Unix; co-bundled plink is used on Windows)
- rfbNewFBSize VNC support on Unix (screen resizing)
- cursor alphablending with x11vnc at 32bpp (-alpha option)
- xgrabserver support for fullscreen mode, for old window managers (-grab option).
The Viewer SSL support is done via a wrapper script (bin/ssl_tightvncviewer) that starts up the STUNNEL tunnel first and then starts the TightVNC viewer pointed at that tunnel. The bin/ssl_vnc_gui program is a GUI front-end to that script. See this FAQ for more details on SSL tunnelling.
The rfbNewFBSize support allows the enhanced TightVNC Unix viewer to resize when the server does (e.g. "x11vnc -R scale=3/4" remote control command).
Enhancements:
- The Unix VNC Viewer now supports UltraVNC file transfer via an auxiliary Java program.
Download (5.0MB)
Added: 2007-08-07 License: GPL (GNU General Public License) Price:
826 downloads
Webminstats 0.10.6
Webminstats is a basic system static logging application that graphs the results. more>>
Webminstats is a basic system static logging application that graphs the results. Its first use is system analysis.
Currently it uses webmin as a base web server and tools package.
The basic design is for a system that can have modules add and removed as easily as webmin itself, well almost.
The current modules are cpu, custom, disk, filesopen, firewall, generic, internet, irq, lm_sensors, load, mem, mysql, network, ping, process, samba, services, snmp, snort, ups, users.
<<lessCurrently it uses webmin as a base web server and tools package.
The basic design is for a system that can have modules add and removed as easily as webmin itself, well almost.
The current modules are cpu, custom, disk, filesopen, firewall, generic, internet, irq, lm_sensors, load, mem, mysql, network, ping, process, samba, services, snmp, snort, ups, users.
Download (0.13MB)
Added: 2007-08-04 License: GPL (GNU General Public License) Price:
812 downloads
linkloop 1.0.1
linkloop software is similar to ping, but tests connectivity at the link layer (layer 2) instead of the network layer (layer 3). more>>
linkloop software is similar to ping, but tests connectivity at the link layer (layer 2) instead of the network layer (layer 3).
This works like the HP-UX linkloop utility. It was tested between Linux and HP-UX. There is also a "server-side" utility.
Enhancements:
- inkloop_reply replies only on the interface having received the packet, instead of all.
<<lessThis works like the HP-UX linkloop utility. It was tested between Linux and HP-UX. There is also a "server-side" utility.
Enhancements:
- inkloop_reply replies only on the interface having received the packet, instead of all.
Download (0.073MB)
Added: 2007-07-19 License: GPL (GNU General Public License) Price:
829 downloads
mrtg-ping-probe 2.2.0
mrtg-ping-probe project monitors round trip time and packet loss to another host. more>>
mrtg-ping-probe project monitors round trip time and packet loss to another host. Still on my TODO list: add own min/max/avg rtt calculation, add perl ping module, add rping and rsh support...
mrtg-ping-probe is a ping probe for MRTG 2.x. It is used to monitor the round trip time and packet loss to networked devices. MRTG uses its output to generate graphs visualizing minimum and maximum round trip times or packet loss.
mrtg-ping-probe depends on the following software being installed on your system: perl (at least version 5.6.1), mrtg (I use version 2.8.8, though any mrtg 2.x version should work), and a ping program that displays a summary of the round trip times upon termination or timeout.
mrtg-ping-probe runs on AIX, BSD/OS 2.1, FreeBSD/2.2.x, IRIX/6.2, Linux, Mac OS X (Darwin 5.4), NetBSD, OpenBSD, OS/2, OSF1 V3.2, Solaris 1.1.2 (SunOS 4.1.4), Solaris 2.5.1 (SunOS 5.5.1), Solaris 7 (SunOS 5.7), Solaris 8 (SunOS 5.8), Solaris 9 (SunOS 5.9), HP-UX 9, Windows 98, and Windows 2000 (english, french, portugesee, and spanish locales).
If you install the Windows ping program that comes with Windows 98, Windows 2000, or WinSock 2.x, mrtg-ping-probe will also run on Windows 95 and Windows 4.0.
Support for additional systems is usually easy to add, as described in the file INSTALL.
Act responsible: do not use mrtg-ping-probe to ping devices without the owners permission. Just imagine 10,000 people would decide to ping your hosts ... mrtg-ping-probe is meant to be used within your network to get round trip time performance figures for your network.
Usage: mrtg-ping-probe [-hsvV] [-d deadtime] [-k count] [-l length] [-o ping_options] [-p [factor*]{min|max|avg|loss|integer}/[factor*]{min|max|avg|loss|integer}] [-r [rsh:][user@]host[:osname]] [-t timeout] host
Enhancements:
- new platforms supported: italian Windows 2000 locale.
- bugfixes: on Windows actually return deadtime when we lost all packets, not 0. the ping child process should actually be killed now on Unix platforms.
- changes: ***** Possible Incompatability ***** raised minimum required perl version to 5.6.1. lots of typos fixed.
<<lessmrtg-ping-probe is a ping probe for MRTG 2.x. It is used to monitor the round trip time and packet loss to networked devices. MRTG uses its output to generate graphs visualizing minimum and maximum round trip times or packet loss.
mrtg-ping-probe depends on the following software being installed on your system: perl (at least version 5.6.1), mrtg (I use version 2.8.8, though any mrtg 2.x version should work), and a ping program that displays a summary of the round trip times upon termination or timeout.
mrtg-ping-probe runs on AIX, BSD/OS 2.1, FreeBSD/2.2.x, IRIX/6.2, Linux, Mac OS X (Darwin 5.4), NetBSD, OpenBSD, OS/2, OSF1 V3.2, Solaris 1.1.2 (SunOS 4.1.4), Solaris 2.5.1 (SunOS 5.5.1), Solaris 7 (SunOS 5.7), Solaris 8 (SunOS 5.8), Solaris 9 (SunOS 5.9), HP-UX 9, Windows 98, and Windows 2000 (english, french, portugesee, and spanish locales).
If you install the Windows ping program that comes with Windows 98, Windows 2000, or WinSock 2.x, mrtg-ping-probe will also run on Windows 95 and Windows 4.0.
Support for additional systems is usually easy to add, as described in the file INSTALL.
Act responsible: do not use mrtg-ping-probe to ping devices without the owners permission. Just imagine 10,000 people would decide to ping your hosts ... mrtg-ping-probe is meant to be used within your network to get round trip time performance figures for your network.
Usage: mrtg-ping-probe [-hsvV] [-d deadtime] [-k count] [-l length] [-o ping_options] [-p [factor*]{min|max|avg|loss|integer}/[factor*]{min|max|avg|loss|integer}] [-r [rsh:][user@]host[:osname]] [-t timeout] host
Enhancements:
- new platforms supported: italian Windows 2000 locale.
- bugfixes: on Windows actually return deadtime when we lost all packets, not 0. the ping child process should actually be killed now on Unix platforms.
- changes: ***** Possible Incompatability ***** raised minimum required perl version to 5.6.1. lots of typos fixed.
Download (0.036MB)
Added: 2007-07-16 License: GPL (GNU General Public License) Price:
554 downloads
httping 1.2.4
httping is a ping-like tool for HTTP requests. more>>
httping is a "ping"-like tool for HTTP requests. Give it a URL and it will show how long it takes to connect, send a request, and retrieve the reply (only the headers).
httping can be used for monitoring or statistical purposes (measuring latency).
Enhancements:
- A big memory leak in the SSL code was fixed.
- An audible ping mode was added.
<<lesshttping can be used for monitoring or statistical purposes (measuring latency).
Enhancements:
- A big memory leak in the SSL code was fixed.
- An audible ping mode was added.
Download (0.008MB)
Added: 2007-07-10 License: GPL (GNU General Public License) Price:
841 downloads
Socks via HTTP 1.2
Socks via HTTP provides a socks tunnel via HTTP. more>>
Socks via HTTP provides a socks tunnel via HTTP.
Socks via HTTP is a program converting SOCKS requests into HTTP requests and tunnelling them through HTTP proxies if needed.
The SOCKS protocol allows programs to traverse firewalls on any port number and is used by many popular programs, like Napster, MSN Messenger, CRT(telnet client) and many others.
Many companies restrict firewall traversals only to HTTP requests, disabling SOCKS proxy.
Socks via HTTP provides a miniature SOCKS server for the SOCKS client, performing its connection through an HTTP proxy to a remote server, which establishes the real connection.
Socks via HTTP is 100% Java, and can run on any OS. It is entirely written in Java.
<<lessSocks via HTTP is a program converting SOCKS requests into HTTP requests and tunnelling them through HTTP proxies if needed.
The SOCKS protocol allows programs to traverse firewalls on any port number and is used by many popular programs, like Napster, MSN Messenger, CRT(telnet client) and many others.
Many companies restrict firewall traversals only to HTTP requests, disabling SOCKS proxy.
Socks via HTTP provides a miniature SOCKS server for the SOCKS client, performing its connection through an HTTP proxy to a remote server, which establishes the real connection.
Socks via HTTP is 100% Java, and can run on any OS. It is entirely written in Java.
Download (0.35MB)
Added: 2007-06-26 License: GPL (GNU General Public License) Price:
854 downloads
VTun 3.0.1
VTun is the easiest way to create Virtual Tunnels over TCP/IP networks with traffic shaping, compression, and encryption. more>>
VTun is the easiest way to create Virtual Tunnels over TCP/IP networks with traffic shaping, compression, and encryption.
In order to compile VTun you need some software packages.
Main features:
- Encryption
- Compression
- Traffic shaping
- VPN
- Mobile IP
- IP tunnel (tun).
- Supports point-to-point IP tunnel.
- Ethernet tunnel (ether).
- Supports all protocols that work over Ethernet: IP,IPX,Appletalk,Bridge,...
- Serial tunnel (tty).
- Supports all protocols that work over serial lines: PPP,SLIP,...
- Pipe tunnel (pipe).
- Supports all programs that works over Unix pipes.
- VTun protocol over TCP.
- Allows to establish tunnels behind firewalls. Very reliable.
- VTun protocol over UDP.
- Fast and efficient protocol with small tunneling overhead.
- Deflate (zlib).
- Very efficient compression. Supported for TCP only.
- LZO (lzo).
- Super fast compression. Supported for UDP and TCP.
- Challenge based authentication.
- No clear text passwords.
- BlowFish 128 bits key.
- Fast efficient encryption with 128 bits MD5 hash keys.
<<lessIn order to compile VTun you need some software packages.
Main features:
- Encryption
- Compression
- Traffic shaping
- VPN
- Mobile IP
- IP tunnel (tun).
- Supports point-to-point IP tunnel.
- Ethernet tunnel (ether).
- Supports all protocols that work over Ethernet: IP,IPX,Appletalk,Bridge,...
- Serial tunnel (tty).
- Supports all protocols that work over serial lines: PPP,SLIP,...
- Pipe tunnel (pipe).
- Supports all programs that works over Unix pipes.
- VTun protocol over TCP.
- Allows to establish tunnels behind firewalls. Very reliable.
- VTun protocol over UDP.
- Fast and efficient protocol with small tunneling overhead.
- Deflate (zlib).
- Very efficient compression. Supported for TCP only.
- LZO (lzo).
- Super fast compression. Supported for UDP and TCP.
- Challenge based authentication.
- No clear text passwords.
- BlowFish 128 bits key.
- Fast efficient encryption with 128 bits MD5 hash keys.
Download (0.064MB)
Added: 2007-06-12 License: GPL (GNU General Public License) Price:
543 downloads
Honeyd 1.5c
Honeyd is a small daemon that creates virtual hosts on a network. more>>
The hosts can be configured to run arbitrary services, and their personality can be adapted so that they appear to be running certain operating systems. Honeyd enables a single host to claim multiple addresses - I have tested up to 65536 - on a LAN for network simulation.
Honeyd improves cyber security by providing mechanisms for threat detection and assessment. It also deters adversaries by hiding real systems in the middle of virtual systems.
It is possible to ping the virtual machines, or to traceroute them. Any type of service on the virtual machine can be simulated according to a simple configuration file. Instead of simulating a service, it is also possible to proxy it to another machine.
annotate "AIX 4.0 - 4.2" fragment old
# Example of a simple host template and its binding create template
set template personality "AIX 4.0 - 4.2"
add template tcp port 80 "sh scripts/web.sh"
add template tcp port 22 "sh scripts/test.sh $ipsrc $dport"
add template tcp port 23 proxy 10.23.1.2:23
set template default tcp action reset
bind 10.21.19.102 template
The different TCP personalities are learned from reading a nmap fingerprint file. The configured personality is the operating system that nmap or xprobe will return. Personalities can be annotated to determine if they allow FIN-scans for open ports or to select the preference in which they reassemble fragmented IP packets.
Honeyd can be used to create a virtual honey net or for general network monitoring. It supports the creation of a virtual network topology including dedicated routes and routers. The routes can be attributed with latency and packet loss to make the topology seem more realistic.
Because Honeyd interacts with potentially malicious adversaries, you should sandbox it with Systrace. Systrace prevents an adversary from exploiting bugs in your Honeyd scripts.
Subsystem Virtualization
Honeyd supports service virtualization by executing Unix applications as subsystems running in the virtual IP address space of a configured honeypot. This allows any network application to dynamically bind ports, create TCP and UDP connections using a virtual IP address.
Subsystems are virtualized by intercepting their network requests and redirecting them to Honeyd. Every configuration template may contain subsystems that are started as separated processes when the template is bound to a virtual IP address. An additional benefit of this approach is the ability of honeypots to create sporadic background traffic like requesting web pages and reading email, etc.
Network Simulation/Internet-In-The-Box
Honeyd supports assymetric routes and the integration of physical machines into the virtual network topology. As a result, it is possible to use Honeyd for simple network simulations: Physical hosts can be exposed to high latency or packet loss, arbitrary routing infrastructures, etc.
route entry 10.0.0.1 network 10.0.0.0/8
route 10.0.0.1 link 10.0.0.0/24
route 10.0.0.1 add net 10.4.0.0/14 tunnel "thishost" "honeyd-b"
route 10.0.0.1 add net 10.1.0.0/16 10.1.0.1 latency 55ms loss 0.1
route 10.0.0.1 add net 10.2.0.0/16 10.2.0.1 latency 20ms loss 0.1
route 10.0.0.1 add net 10.3.0.0/16 10.2.0.1 latency 20ms loss 0.1
route 10.1.0.1 link 10.1.0.0/24
route 10.2.0.1 link 10.2.0.0/24
[...]
route 10.2.0.1 add net 10.3.0.0/16 10.3.0.1 latency 10ms loss 0.1
route 10.3.0.1 link 10.3.0.0/24
route 10.3.0.1 add net 10.3.1.1/24 10.3.1.1 latency 10ms
route 10.3.0.1 add net 10.3.240.0/20 10.3.240.1 latency 5ms
route 10.3.1.1 link 10.3.1.1/24
route 10.3.240.1 link 10.3.240.0/20
route 10.3.240.1 add net 0.0.0.0/0 10.3.0.1 latency 40ms loss 0.5
[...]
bind 10.2.0.243 to fxp0
bind 10.3.1.15 to fxp0
Using GRE tunneling allows the creation of distributed setups that allow Honeyd to scale to larger networks. It also allows virtual machines to be spread across separate address spaces as GRE tunnel selection can be based on the source addresses.
<<lessHoneyd improves cyber security by providing mechanisms for threat detection and assessment. It also deters adversaries by hiding real systems in the middle of virtual systems.
It is possible to ping the virtual machines, or to traceroute them. Any type of service on the virtual machine can be simulated according to a simple configuration file. Instead of simulating a service, it is also possible to proxy it to another machine.
annotate "AIX 4.0 - 4.2" fragment old
# Example of a simple host template and its binding create template
set template personality "AIX 4.0 - 4.2"
add template tcp port 80 "sh scripts/web.sh"
add template tcp port 22 "sh scripts/test.sh $ipsrc $dport"
add template tcp port 23 proxy 10.23.1.2:23
set template default tcp action reset
bind 10.21.19.102 template
The different TCP personalities are learned from reading a nmap fingerprint file. The configured personality is the operating system that nmap or xprobe will return. Personalities can be annotated to determine if they allow FIN-scans for open ports or to select the preference in which they reassemble fragmented IP packets.
Honeyd can be used to create a virtual honey net or for general network monitoring. It supports the creation of a virtual network topology including dedicated routes and routers. The routes can be attributed with latency and packet loss to make the topology seem more realistic.
Because Honeyd interacts with potentially malicious adversaries, you should sandbox it with Systrace. Systrace prevents an adversary from exploiting bugs in your Honeyd scripts.
Subsystem Virtualization
Honeyd supports service virtualization by executing Unix applications as subsystems running in the virtual IP address space of a configured honeypot. This allows any network application to dynamically bind ports, create TCP and UDP connections using a virtual IP address.
Subsystems are virtualized by intercepting their network requests and redirecting them to Honeyd. Every configuration template may contain subsystems that are started as separated processes when the template is bound to a virtual IP address. An additional benefit of this approach is the ability of honeypots to create sporadic background traffic like requesting web pages and reading email, etc.
Network Simulation/Internet-In-The-Box
Honeyd supports assymetric routes and the integration of physical machines into the virtual network topology. As a result, it is possible to use Honeyd for simple network simulations: Physical hosts can be exposed to high latency or packet loss, arbitrary routing infrastructures, etc.
route entry 10.0.0.1 network 10.0.0.0/8
route 10.0.0.1 link 10.0.0.0/24
route 10.0.0.1 add net 10.4.0.0/14 tunnel "thishost" "honeyd-b"
route 10.0.0.1 add net 10.1.0.0/16 10.1.0.1 latency 55ms loss 0.1
route 10.0.0.1 add net 10.2.0.0/16 10.2.0.1 latency 20ms loss 0.1
route 10.0.0.1 add net 10.3.0.0/16 10.2.0.1 latency 20ms loss 0.1
route 10.1.0.1 link 10.1.0.0/24
route 10.2.0.1 link 10.2.0.0/24
[...]
route 10.2.0.1 add net 10.3.0.0/16 10.3.0.1 latency 10ms loss 0.1
route 10.3.0.1 link 10.3.0.0/24
route 10.3.0.1 add net 10.3.1.1/24 10.3.1.1 latency 10ms
route 10.3.0.1 add net 10.3.240.0/20 10.3.240.1 latency 5ms
route 10.3.1.1 link 10.3.1.1/24
route 10.3.240.1 link 10.3.240.0/20
route 10.3.240.1 add net 0.0.0.0/0 10.3.0.1 latency 40ms loss 0.5
[...]
bind 10.2.0.243 to fxp0
bind 10.3.1.15 to fxp0
Using GRE tunneling allows the creation of distributed setups that allow Honeyd to scale to larger networks. It also allows virtual machines to be spread across separate address spaces as GRE tunnel selection can be based on the source addresses.
Download (0.87MB)
Added: 2007-05-29 License: GPL (GNU General Public License) Price:
888 downloads
Secleted [ 0 ] software to compare
Copyright Notice:
Software piracy is theft, Using crack, password, serial numbers, registration codes, key generators is illegal and prevent future software development. The above ping tunnel search only lists software in full, demo and trial versions for free download. Download links are directly from our mirror sites or publisher sites, torrent files or links from rapidshare.com, yousendit.com or megaupload.com are not allowed