Xu, I believe in honeywall 1.2 (latest roo), there has to be an assosciated flow (please correct me if I am wrong) but what I found on older release is that just
a. try to run an exploit yourself from different network OR b. open up rdp. login and run some commands from command line. (From different network). Hope this helps. If you can find another way , please do let me know too. :) -Parvinder Bhasin Xu nanxuan wrote: > I use a WinXP as a honeypot with sebek-windows installed in > honeynet(Roo). But I wonder how can I trigger the Sebek do something and > view the relevant sebek result in the walleye? > Thanks! > > ------------------------------------------------------------------------ > Get news, entertainment and everything you care about at Live.com. Check > it out! <http://www.live.com/getstarted.aspx > > > > ------------------------------------------------------------------------ > > _______________________________________________ > Honeywall mailing list > [email protected] > https://public.honeynet.org/mailman/listinfo/honeywall _______________________________________________ Honeywall mailing list [email protected] https://public.honeynet.org/mailman/listinfo/honeywall
