Hello all,
i do a ssh to my honeypot from a system outside a network and then from the
honeypot's cmd window i do a ssh to a production machine.
i was able to see the ssh connections i did in the Walleye UI.
It shows me the process tree and all processes nicely mapped. Fine.
When i view details for the ssh connection from honeypot to Production which
i initiated, i'm able to see keystrokes.
But the issue is when i view details for the ssh connection to the honeypot,
i dont see any keystrokes. (even though i did a lot of activity on the
honeypots through the ssh connection)
Is this a normal thing? I dont think so. I guess i should be able to see
keystrokes for ssh connection to honeypot as well.
Does anybody have any idea why this is happening?
Thanks in advance.
---------------------------------
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now._______________________________________________
Honeywall mailing list
[email protected]
https://public.honeynet.org/mailman/listinfo/honeywall
