Hello and welcome to the Tuesday, May 5th, 2006 edition of the Sands Internet Storm Center's

Stormcast. My name is Johannes Ulrich, recording today from Jacksonville, Florida. And this episode

is brought you by the Sands.edu graduate certificate program in penetration testing and ethical hacking.

Well, in diaries today, I gave a little update on the D-Shield Honeypot.

I released today a version that will actually allow you to run it on the latest version of Ubuntu, 2604. There was only one minor adjustment I have to make,

and it only affected the minimum install of Ubuntu. So if you have one of the normal server

installs, well, it should just work out of the box. Before you upgrade to Ubuntu 2604, realize that some of the base utilities of the box before you upgrade to Ubuntu 2604,

realized that some of the base utilities of Linux,

like Move, RM and the like.

They were rewritten in Rust in that version,

and apparently it had actually led to some other vulnerabilities,

like some time of check, time use warn abilities. So not as it

recommending that you're upgrading to 2604. And for now, we definitely will still support

2404 in particular since they are so similar. But if you have a new 2604 system, well,

the honeypot should just work nicely on it.

Also making some adjustments to Cowrie that'll take a little bit longer.

There was one odd sort of encoding issue where some of the API keys were induced correctly.

So if you do observe that your SSH Intelnet reports are not being reported to us,

well, let me know and I can walk you through how to fix it.

But that'll probably come in the next couple of days as an official update to the honeypot,

including sort of a little bit of revamp of Kauri itself.

Cowry, if you're not familiar with it,

...