Darknet
cisco_trooper
Member Posts: 1,441 ■■■■□□□□□□
in Off-Topic
DARKNET
Hey all. I'm getting ready to embark in a little Darknet project to satisfy some curiosities, but it looks like it may require a fairly significant topology change in both my test and production environments. I was curious if any of you have set this up before and find it to be worthwhile. Also, if you HAVE done this, any suggestions, pitfalls, etc. to avoid would be great.
Hey all. I'm getting ready to embark in a little Darknet project to satisfy some curiosities, but it looks like it may require a fairly significant topology change in both my test and production environments. I was curious if any of you have set this up before and find it to be worthwhile. Also, if you HAVE done this, any suggestions, pitfalls, etc. to avoid would be great.
Comments
-
cisco_trooper
Member Posts: 1,441 ■■■■□□□□□□
-
networker050184
Mod Posts: 11,962 Mod
Nothing productive to add, but it sounds interesting. If you move forward let us know how it goes. Good luck!An expert is a man who has made all the mistakes which can be made. -
cisco_trooper
Member Posts: 1,441 ■■■■□□□□□□
I got it up and running in my test lab. I don't know yet if it was worth the hassle, but I can tell you it sure is interesting to see connection attempts FROM port 80. What's even more interesting is the presence of TCP acknowledgements in packets coming from port 80 on that host. Yeah, this particular box was in China by the way. Go figure.
Next up is to get my darknet box to complete the three-way handshake so I can capture application data from these miscreants.