Need help coding a honeypot and a signature based IDS

sensini · Web Design Newbie Joined: Oct 18, 2005 Posts: 10

I am doing my final year project. I have to create a honeypot and a signature based IDS to detect an attack, so that those packets(those involved in the attack) can be redirected to the honeypot.
Where do I get the signature database for the IDS? I found that most links in snort.org wher not working.
What language is best suited for this purpose? Please give me some links to comprehensive tutorials on that language. I have a basic idea of socket programming in C.

Thank you.

sarah1 · Freshman Joined: Dec 08, 2005 Posts: 5

you could use UML(user-mode-linux) for honeypot
and use iptables, it has some string match module to redirect those signatures, search packetstorm.org for such signatures