-
June 26th, 2008, 02:37 PM
#1
Setting up a Tarpit (Teergrube) to slow worms and network scanners using LaBrea
Setting up a Tarpit (Teergrube) to slow worms and network scanners using LaBrea (The "Sticky" Honeypot and IDS)
http://www.irongeek.com/i.php?page=v...neypot-and-ids
A network Tarpit, sometimes know by the German word Teergrube, is a service or set of hosts that deliberately try to slow malicious network connections down to a crawl. The idea is to put up unused hosts or services on the network that respond to an attacker, but do things to waste their time and greatly slow their scanning (or spreading in the case of Worms). For this video I’ll be using a package called LaBrea by Tom Liston and tarpitting unused IP addresses on my home LAN.
-
June 26th, 2008, 09:02 PM
#2
Junior Member
Excellent work as usual. Its nice to see the correct way to setup a tarpit as I've done it incorrectly several times.
Similar Threads
-
By Soda_Popinsky in forum Miscellaneous Security Discussions
Replies: 8
Last Post: October 6th, 2005, 08:31 PM
-
By XTC46 in forum Site Feedback/Questions/Suggestions
Replies: 15
Last Post: August 24th, 2005, 07:52 PM
-
By SDK in forum Miscellaneous Security Discussions
Replies: 0
Last Post: December 1st, 2004, 12:45 AM
-
By gore in forum Newbie Security Questions
Replies: 11
Last Post: December 29th, 2003, 08:01 AM
-
By NullDevice in forum The Security Tutorials Forum
Replies: 21
Last Post: December 17th, 2003, 10:03 PM
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|