rescue Errno::EACCES
puts “”
puts ” Error: Honeypot Creator requires root privileges!!”
puts “”
rescue Errno::EADDRINUSE
puts “”
puts ” Error: Port in use.”
puts “”
rescue Errno::EMFILE
puts “”
puts ” Maximum number of connection attempts reached; connection refused (possible DoS)”
puts “”

Or something like that. But the result is the same, the Honeypot would crash.

The program should kill first threads when are more than 300 (for example). Im working on this now, it is not so difficult but takes time.

def honeyconfig(port, message)
begin
tcpserver = TCPServer.new(“”, port)
if tcpserver
puts “”
puts ” HONEYPOT ACTIVATED (” + Time.now.to_s + “)”
puts “”
count = 1
maxcount = 300 # Maximum number of connections
loop do
socket = tcpserver.accept
if socket and count <= maxcount
count += 1
Thread.new do
puts ""
puts " INTRUSION ATTEMPT DETECTED! (" + Time.now.to_s + ")"
puts " —————————–"
puts ""
puts socket.recv(1000).to_s
sleep(7)
socket.write(message)
socket.close
end
else
puts " Maximum number of connection attempts reached; connection refused (possible DoS)"
end
end
end
rescue Errno::EACCES
puts ""
puts " Error: Honeypot Creator requires root privileges!!"
puts ""
rescue Errno::EADDRINUSE
puts ""
puts " Error: Port in use."
puts ""
end
end

(…)
———————————–

Simple, but it works -you'll never need (for instance) +300 connections, so if it reaches that number it could be considered as a DoS and the program must stop, although it's fine to continue showing messages so that you knew when the attacker had stopped DoS'ing.