Honeyd Design

Honeyd does not intercept network traffic.

Traffic needs to be directed towards Honeyd.

Route a complete network:
Very simple.
Separate networks not always available.

Proxy-Arp or Arpd:
Allows Honeyd to use IP addresses on an existing network.
Arpd can detect all unallocated IP addresses.