Honeyd Design


Every packet handled by central dispatcher:
Behavior depends on personality and protocol.
Other protocols logged then dropped.

TCP and UDP are stateful and can run arbitrary services.

Every output packet is passed via personality engine:
May change the packet to match configured personality.


Optional routing module
decrements TTL	
generates ICMP time exceeded in transit messages
manages queuing and propagation delay