The author sets up a diskless honeypot in chroot environment, and relates the system root directory to chroot directory with nfs, so in such a honeypot, the hackers " file access will be recorded by means of capturing network packets 作者設(shè)置了一個更改根目錄(chroot)環(huán)境下的無盤蜜罐,利用nfs把系統(tǒng)根目錄與更改根目錄聯(lián)系起來,采集網(wǎng)絡(luò)數(shù)據(jù)包就能記錄黑客在蜜罐內(nèi)對文件的訪問活動。