honeyd

This version includes proper handling of ARP packets. It also adds support for Mac OS X by automatically disabling kqueue and poll on Mac OS X, so that Honeyd gets notified on bpf events. It's easier to compile due to removed dependence on libdnsres; libevent's DNS support is used instead. A more flexible configuration of proxy directive supports hybrid honeypot environments.

A crash in the ARP handling code was fixed. The
default actions for UDP packets were fixed.

Subsystem support was improved. A stats collector
was added. SMTP and Proxy subsystems were added
for high-performance. Security fixes were done.

This release adds an internal Web server that shows traffic statistics. Support for statistics reporting so that an aggregator daemon can collect statistics from Honeyd deployments around the world to detect new worms. Support for DHCP Honeypots. A security update check that provides warnings on the Web interface and in syslog if the current Honeyd version has known vulnerabilities.

Several bugs that would cause operating system detection with nmap to fail were fixed along with compilation issues for honeydctl on Linux and *BSD. Support for log rotation via SIGUSR1 was added.