Here's an update to honeyd: http://rui.cx/ports/honeyd-1.5b.diff
To build the latest honeyd version you'll need libdnsres (http://monkey.org/~provos/libdnsres/). Here's a libdnsres port: http://rui.cx/ports/port-libdnsres.tar.gz Since 1.0, new Features * Statistics Collector: A daemon that can process netflow-like information exported by several Honeyd instances and do computations on the data. * Improved Subsystems: Improved support for subsystems permits running more complicated UNIX applications like mwcollect (and nepenthes) as a subsystem for Honeyd. * Proxy and SMTP subsystems: Example subsystems to simulate open proxies and mail relays. These subsystems are written with performance in mind and have no problem in keeping up with a busy network. Bug Fixes * A typo in an assert caused Honeyd to crash for most services. * The subsystem support did not correctly support getsockname for sockets coming via accept(). * A crash when processing ARP packets. * Correct default action handling for UDP packets. * Fixed --without-python flag when using configure. works for me on i386, amd64 and macppc. Test and comment. Rui Reis
