OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Marcelo de Souza (marcelo_at_acme-ids.org)
Date: Tue Aug 13 2002 - 07:37:03 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi all,

    I don't have much experience in the Honeypot/HoneyNET world yet, and I have
    never used HogWash before. But I'm trying to revert this scenario...

    As much as I know, HogWash is a content-based packet filter, right?

    So, is there any problem / disadvantage on running HogWash/IPtables on the
    same machine? Is it even possible?

    Thank you in advance.

    ------------------------------------------------------------
       - MARCELO DE SOUZA - <marceloacme-ids.org>
     
       Computer Science / UNESP - S. J. Rio Preto, SP, Brazil
     
             -- ACME! Computer Security Research --
     
                http://www.acme-ids.org/~marcelo
    ------------------------------------------------------------

    -------------------------------------------------
           ACME! Computer Security Research
               http://www.acme-ids.org