Honeyd Overview Honeyd is a low-interaction virtual honeypot: Simulates arbitrary TCP/UDP services. Supports multiple IP addresses: Tested up to 65536 addresses simultaneously. Supports ICMP: Virtual machines answer to pings and traceroutes. Adapts different operating system personalities: Reads an Nmap/Xprobe fingerprint files. Fools Nmap and Xprobe2. Adjustable fragment reassembly policy. Adjustable FIN-scan policy.