Honeywall CDROM

Honeywall CDROM is a high-interaction tool for capturing, controlling and analyzing attacks. It creates an architecture that allows you to deploy both low-interaction and high-interaction honeypots, but is designed primarily for high-interaction.



The goal of this page is to provide you the latest documentation, source code, distribution, and information for the Honeynet Project’s Honeywall CDROM. The Honeywall CDROM is a bootable CD that installs onto a hard drive and comes with all the tools and functionality for you to implement data capture, control and analysis.

Please provide any feedback or suggestions to [email protected]…. Bugs should be submitted as Trac Tickets, after registering a user account.



We have attempted to document the Honeywall CDROM as much as possible. The first place to start is to understand the concepts, issues, and risks of deploying a honeynet. We recommend you read and understand the three following KYE papers.


Getting Involved

One of the goals of this site is to get you, the community, more involved in helping develop and maintain the Honeywall. Here are just some of the many ways you can get more involved:

  • Join the  Honeywall public maillist.
  • Contribute to the community FAQ. The goal is to give the community a place to ask and answer questions pertaining to the honeywall.
  • Send feedback and suggestions to the public maillist
  • Submit bug reports and/or patches via Trac





  •  roo-1.3.hw-b1.iso – This beta release contains the same functionality as roo 1.2 with some bug fixes. However, the base Operating System (OS) has been changed from  Fedora to  CentOS. CentOS was selected because it did not require much change to our build process and because it has a longer support period.

To checkout the svn repository,

$ svn checkout  https://projects.honeynet.org/svn/honeywall/honeywall/trunk honeywall



The Honeywall CDROM is a collection of various OpenSource software. If not otherwise specified, the software on the CDROM falls under the  GNU GENERAL PUBLIC LICENSE. The source code of the standard packages on the CD are available from their respective original providers (for example on the FTP servers at Debian, RedHat, Mandrake). Any software on this CDROM developed by the Honeynet Project is copyright the Honeynet Project and falls under the  GNU GENERAL PUBLIC LICENSE. This software can be identified by a header stating as such. The source code for any software developed by the Honeynet Project can also be found on our home website.