
+--------------+
| Instructions |
+--------------+

Requirements
------------

honeyd installed (we tested on honeyd 0.5)
arpd installed (we tested on arpd 0.2)
java jre installed (we tested on j2sdk1.4.0_03)

Usage
-----

1. Use 
     ./make_bundle.sh 
   to build an archive, called "gmhoney.tgz" that contains
   all the necessary files to setup a simple smtp service
   emulation. 

2. Unpack the archive in a directory where you want the files
   to reside:
     tar -zxf gmhoney.tgz

3. Adapt the IP address in config.smtp to the IP address
   of your honeypot (e.g. 172.16.206.140) and the port
   number on which you want your service to connect 
   (e.g. port 25).

4. Launch arpd to have your honeypot respond to arp
   queries for this IP address:
     arpd 172.16.206.140

5. Launch honeyd to activate the honeypot on this IP address:
     honeyd -f config.smtp -l honeyd.log 172.16.206.140
   If java is not in your path, jou must add the path
   to the java binary in "service.sh".

6. Try to send a mail to your honeypot using for instance your 
   favorite mail client and verify whether the mail is accepted.
   You can do this several times and sniff in the mean while
   the connection to extract the version number that is 
   published by the service in its banner.

7. If the service is not working properly, try running honeyd
   with the -d option to get more information on what's happening.

Have fun.

Files
-----

The subdirectory contain the different packages of the Java project.
Service.java contains the main class.

The configuration file, defining the finite state machine that
emulates the service, has the default name "gmhoney.xls".
Its DTD is in "gmhoney.dtd".

Some more background information can be found in "gmhoney.pdf".

The role of the other files ("config.smtp", "make_bundle.sh", 
"service.sh") is described in the file "README".


Contact information
-------------------

author:        Wim Mees
email address: Wim.Mees@vision.rma.ac.be
[ Address removed.  Niels Provos ]
