Honeycreds not sending expected traffic

[glwallum]

Environment: Centos 7 Minimal Python 3.9.6 smbprotocol 1.5.1 cffi 1.14.5 splunk-sdk 1.6.16 requests 2.25.1

Setup Honeycreds and attempted to test with Responder, did not see any traffic in responder.

Ran TCPdump on host while Honeycreds was running, discovered only DNS traffic being sent. Sample DNS traffic below.

IP xx.xxx.xxx.xxx.37311 > 1xxx.xxx.xxx.xxx53: 2376+ A? sqldev01.emc.com.local

[glwallum]

Found issue.

• LLMNR is disabled on certain Linux variants, and possibly not supported in others
• Specifying an FQDN in the .conf file might throw errors or not correctly trigger LLMNR queries

In my environment, had to enable LLMNR and restart service

• /etc/systemd/resolved.conf
• sudo systemctl start systemd-resolved.service

And clear the FQDN entry in honeycreds.conf

• def_fqdn =

[garilla2]

Product does not work at all for me. Even with your change.