Personalities



Example: UDP packet for AIX 4.0:
Fingerprint AIX 4.0 - 4.2
PU(DF=N%TOS=0%IPLEN=38%RIPTL=15C%RID=E%RIPCK=F%UCK=E%ULEN=134%DAT=E)

For a closed UDP port, Honeyd generates an ICMP Port Unreachable Message quoting the received IP packet.

Personality engine changes certain fields:
Byte order of certain fields may be flipped to host order.
Data length may change.
Corruption of quoted data may be inserted..