Honeyd Implementation TCP/UDP ports may be connected to an arbitrary service. add template tcp port 23 "sh scripts/router.pl" Honeyd forks child process to execute service application. Stdin/out is connected via socketpair to connection. Stderr is just a pipe and used for service syslog. Libevent handles incoming and outgoing data: New I/O channels just get added without extra complication for the application.