Honeynets

What are honeynets ?

A Honeynet is a network formed by Honeypots.

A Honeypot can be either a low-interaction one (like Honeyd) ; these ones emulate computers and services.

What is Sebek ?

Sebek is a kernel-land client that tries to hide itself to the users and to get a lots of information and send it to server. It is intended to be used on honeynets. In this case, neither the computers nor the services are emulated : Sebek is a high-interaction honeypot.

Sebek

Clients for *BSD

I'm one of the three guys from the Droids Corporation working on the Sebek clients for BSD systems.

This work is available on the Honeynet page of the Droids Corporayion.

Papers

• Sebek 2 client for FreeBSD and NetBSD : [PDF]
• Official Sebek 2 client for OpenBSD (official), a fast study : [PDF].

Hacking Sebek

Scapy now has full support for the Sebek protocols. It can be used to make debugging Sebek client easier.

This tool can also be used to understand better what is Sebek and how it works.

Latest update on May 22, 2005.